A permissions cache would make most sense as long as you are "near" a certain object while surfing. I think I'm near an object for about 5 minutes - maybe.
We are talking about a default value anyway right? A programmer can set a timeout of 60 minutes for a subsite index page which I am likely to hit way more often.
