NX-493: Proxy logic was flawed and not robust

The root document update was flawed, happened always
except when needed.

The root processing is now caged, the exception
will not bubble up but error will be reported,
salvaging as much as possible. User still can force
re-download by expiring caches from root.