Only let clients that handshake successfully hold a slot, tighten initial handshake timeout