If we fail to load/parse a particular config-in-database table, we probably need to start up anyway (to avoid bricking the gateway entirely). However, we should error very loudly when this happens (since various functions/variants will not exist). We should also think about how far we want to propagate errors 'upwards' - should a broken variant disable the entire function if an experimentation config explicitly listed it?