Function backoff_secs 

pub fn backoff_secs(failures: u32) -> u64

60·2^(failures−1) seconds, capped at one hour; 0 when there are no failures.