bot will now reject changes that fail auth's sanity check and rollback
the config to the last-known good version