Always one day more than people on HN tell you. If something is compromised you will hear people complaining here that three days is not enough.