we should either 
- allow fallible everything (status quo) 
- or fallible nothing (user must UnwrappingAdapter both the CS and SPI)
- or poison the bus on any failure (CS and SPI)