From the parent ticket:
And then comes process locking. First execution of failsafe shows properly that there are no ppkeys available and aborts:
Second execution however, has that same promise locked, and proceeds to execute the rest of failsafe.cf:
As a result, two identical executions one after the other, have different results, and the last one can, under specific conditions, start cf-serverd!
How to ensure consistent failsafe behaviour?