Good question. We should consider using transactions where it makes sense to avoid odd states. This method needs to be looked at closer anyway because it does a "blind" redeployment; in other words it doesn't verify that the new container accepted the module deployment.