That's true. The way we solve it is by splitting our infrastructure deployments in two parts: a volatile part and a persistent part; it gives us more confidence when deploying the stateless part, but sadly it also means that the persistent deployments don't get as much exercise as the stateless part and are somewhat more prone to bitrot.