Follow up to #2857.
To give services external access, we make calls to dendrite to configure the switch. But those are stateful meaning a failure part-way through leads to leaking those entries. Ideally we'd use a saga to handle rollbacking on failures.
