3 ms·

Or even better a single signing key for each phone so they don't get carte blanche access from a single request.