Reject clients that do not authenticate quickly enough.

The current timeout value before the server fails the handshake is
15 s.  This may need to be increased for clients over slow links.