make federation safer on failure, change federation protocol