Handle exceptions for ensure for filter strategy

[batate]

Right now, an exception would exit the stack. We probably want to fire the after filters anyway.

Alternatively, have before/after/ensure all implemented separately.