Actually, more precisely what is going on is that due to timing issues, the second invalidation key call could happen 200ms after the first one. It happens very randomly. Being on the safe side and making sure that the time between them two is at the most 3 seconds should be more than enough.