Note that a download is attempted whenever a user has mistyped their password or enters a new password to obtain an ID from the vault. If access to the vault server is fast there are no problems. If access to the vault server however is slow, this variable can be used to solve two problems:
1) When a user enters the correct password for the ID in the vault if it is not downloaded in this time the user is told the password was wrong! They must try again withe the same password. Making this maximum wait longer will reduce the likely hood of this occurring for configurations with slower response.
2) When a user mistypes their password and the vault server does not respond with an error quickly, the user must wait this amount of time before they are told that their password is wrong.
So, a value must be selected that is a balance between these two needs.
Default 5000 ms = 5 seconds.