Security breaks during partial failures – design notes from distributed systems