We don't want restart on failure because a bad config would create an infinite loop.