Decide what to do with a protected failing message bundle.

[afck]

A message bundle can conceivably contain both a protected message and a user application message that fails to execute.

Maybe we should just disallow this: There are very few protected messages anyway, and we could simply disallow them being in the same bundle as a user application message.

[deuszx]

Another option is to distribute (and handle) system messages separately from user-application ones. This way we wouldn't need to implement the concept of Skippable/Protected messages at the protocol level:

• all system messages are protected
• user messages have to be handled/skipped/rejected in the user application.