unwind

Run a needsUnwind body's finally blocks, once, on the driver's thread: the body runs on whatever thread resumes it, so never from cancel, whose caller is the HTTP thread. Skipped once authorization is gone — a revoke ends the snippet's code, cleanup included. A cleanup that throws is only logged (class name, as the pump logs): the caller already has its answer.