more explanation, shorter timeout for rekeying