restart wkd sync on failure...
... but with a reasonable delay of five minutes, and limited to three invocations per hour. After that the service goes into failed state.
This should mitigate service failure caused by intermittent network issues or server reboot on our side.