At the moment, when you submit invalid parameters (e.g. an invalid push certificate for iOS) the config operator will fail to create the variant on UPS. But the binding will still be created successfully and to the user it appears as if everything is in order.

What we should do: the binding should fail when the variant fails to be created.
How? Let's add another task to the bind and unbind roles that polls UPS for the variant a number of times after the binding secret has been created. If after e.g. 5 tries the variant is still not there the binding is considered failed.

The same can be used for unbind. Poll UPS if the variant is removed and if it's still there after a number of retries then unbind is considered unsuccessful.