add a short sleep for security failures