Similar to HADOOP-14783, I did a sweep of KMS client code and found an undocumented KMS client config. It should be added into core-site.xml.
From the code it appears this config affects both client side connection timeout and read timeout.
In fact it doesn't looks like this config is tested. So would be really nice add a test for it as well.