for the paranoid there's safer_get_or_create to avoid https://code.djangoproject.com/ticket/13906