It will retry expired auth but backing off the timeout is a good idea!