Better logging, consistent timeouts,
unlock backend only if healthy, cloudControl provider agent