Always cache the response from protected planet, and throw an error
externally to that

Ideally we'd check for other errors, and delete the cache if it's not a
timeout.