api: allow specifying no timeout