refresh service: don't keep db locked when refresh failed
factory: don't silently handle and discard IOException when refreshing