in a bogus state.  Without this, after a transaction abort
(i.e. through an exception), nothing can modify the database.