Errors in handler forms of `unwind-protect` will propagate.  But that's just fine here, because restoring the default really shouldn't fail, but if it does, the test case should fail to make us aware of the problem.