must have lost this: when force=true, do not trust comparing version and generation - this is not a strong enough check