Explicitly set virus placeholder max-age

If we don't set this we'll inherit whatever the default downstream
is - which may be up to 30 minutes.