don't cache project's blacklist + don't leave user naked if query fails