3 ms·

I believe this can be fixed with kerberos, but in practice very few people probably deploy it that way.