@ggrin explained that this is what that timeout was for. made it a bit less arbitrary, and documented it
add warnings about how claimAccess messes with cache control, see #380