schemachange app: only give graceful_failure back to caller