When a dry-run update is made, the error is both not logged and the message is not returned to the policy status.

This is particularly noticeable when recordDiff is set because the diff is not logged but no context is given as to why.