So if I understand this correctly none of our provisioning, validation, or setup can trigger the rescue block below that runs cleanup? Don't we want to be able to run cleanup on failed provisioning, validation or setup?