Treat directory guard success only as a partial success for the guard?
Right now, we treat having received data from a directory guard as that guard having succeeded. But this could be trouble: it doesn't actually mean that the guard will make circuits nicely. We could use a notion of 'partial success' for guards, possibly? Or a separate directory/circuit success track?