[oneshot] make sure settings script is run at the correct time, and fail in case of errors