Just to clarify, the refuseUid was passed to the endpoint (see below), but was not kept around in the Pass(endpoint, refuseUid) marker, which is needed if I want to restore the quarantine after a failed attempt.