* Validating the upgradeable packages (more or less, it could still run into a race condition)
* A get instead post on the API path
* Polling the state of the returned job_id