Rejecting the conflicting request is being robust to improperly reused idempotency keys. There's no other reasonable answer.