4 ms·

Seems like this could be bearable (badum-bum-psh) if it was only enforced during a token refresh (as opposed to every request), even on mobile.