* when exception was thrown from RecoveryCompleted the permit was returned twice, resulting in negative balance