state: we don't leak timing info on write