"It's a security measure" would be a very convincing line for a slower response time on a single, infrequent action that the user takes.