Currently, Pacemaker ignores the return value of notify actions.

It might be useful to support on-fail for notify, defaulting to ignore to preserve current behavior. Pre-stop notifications should probably allow only ignore, block, and fence.

This would mean that any on-fail in op_defaults would begin to apply to notify, which would be an unexpected change in behavior, so this should only be done at a major version bump.