When an update run fails for whatever reason after several servers have been updated, it quite quickly goes through the already updated servers on re-run since there's nothing to do. The only thing that takes a fair amount of time is putting each of those in maintenance mode and then bringing them back. Could we check whether those containers actually need updating and only put them into maintenance mode if they do?