recovery and errors

[Evanfeenstra]

• if a policy errors comes through, signer should not panic
• handle the error and return to the broker to persist it there
• the broker should not panic the thread on a timeout... but instead should just return nothing to the HSMD proxy, and wait for further messages

What about peristing errors on broker? should we create an error DB that can be pulled from the app or whatver?