api: make requestMaxAge configurable