> There are no other choices.

Fail safe noisily and implement a cooldown period.