Function hold_ceiling 

pub(crate) fn hold_ceiling(
    arrived_at: Instant,
    config: &EgressConfig,
) -> Instant

The ceiling on an crate::action::Action::Hold: a gate nobody releases is still written at arrived_at + max_hold, so a hook cannot pin a stream open forever.