send-service-unavailable-reply fails to protect the software from random conditions.

If a client closes prematurely a request that was supposed to be handled as a
503. The condtion is going to bubble up and end up unhandled, crashing the whole
process. The protection mecanism implementated in `process-connection :around`
is now factored out and re-used here.