In the case of the rsync canary, compelling rsync to not remove the canary would not be sufficient. They would also need to compel rsync to periodically replace the existing canary with a new one.