Pass number of seconds to the timeout API something like /sleep/<int:n>. Top limit should be protected anyway.