The cURL tool needs to add some post-timeout slop (1 second should be fine) to its duration. I've also seen runs that defaulted to PT10S that finished up after 7 seconds. Need to look at whether the timeout being set is correct.