I am looking for the best way to sleep in a java script policy. We want to inject random delays in specific use cases to confuse hackers. Is this possible or will it cause issues? I could loop for the delay period but I have concerns about burning CPU cycles and creating performance issue.