protect against random failures