Good ideas. The blacklisting seems a bit harsh -- what if the failure is due to a temporary, unintentional problem? Perhaps after a number of retries, or, if there is a high level of certainty about the untrustworthiness of the mint.