Traversals should try to complete before tokens received could expire, per BEP 5. This seems like a reasonable default for timeouts anyway.