For the average user this query will only ever happen once when they are redirected from another site's age gateway since `ag_values` and `expires` will usually be None. Not sure how this significantly adds to DOS vulnerability?