I don't think we need to wrap this in a timeout -- we generally don't try to protect against bad/slow async extension code anywhere else