This is a resend of an earlier version after Jan found a spot I had missed. The patch is still very simple, though, and it uses the existing .failed named scope, resulting in less code. Here is the initial thread from a couple of weeks ago: http://lists.fedorahosted.org/pipermail/aeolus-devel/2012-March/009458.html -- Matt