use retry logic on metadata and ACLs too. log all exceptions in KeyJob