This makes install() idempotent as it should be.
And by default, the user expects recipes to do their best
to undo any partial change on error.