Make failure to create extrainfo an error?
Currently, we warn with LD_BUG if we couldn't create extrainfo, but we still upload the server descriptor. Can't we warn a bit more loudly and not upload the server descriptor or even assert that we can generate extrainfo?