If kestegs save was passive:
- Laarz shouldn't have got a failed message
- Laarz could have gotten a failed message if there was an active action kestegs did
Conclusion: You need to tell us if there was an active action Laarz could get a fail on.
Why not? The 'protect' portion of a jailkeeper's ability would have failed.
(Not that I'm convinced Laarz is a jailkeeper).