XXX: currently does not always delete haproxy backends for onload
when it should. This can be demonstrated with the tls/onload test:
deploy, verify, undeploy, then deploy again. The second deployment
fails because the haproxy backend from the first run, which should
have been removed by undeployment, still exists and is reported
by dataplane as 409 Conflict.