4 ms·

Imho the complexity and cost of having super short-lived access tokens is worse than eating up 1 more per-request db lookup