Use call_with_passes in the rest of the client; handle another error mode

If all passes were good but there simply were not enough of them, don't retry.

Replace the tricky _rref property with a decorator.  This guarantees _get_rref
is evaluated for each function call before we do anything with pass generation.