We may get several MoveFrom/MoveTo events per read. If we are lucky,
we get complete pairs for renames and the cookie list is empty, then
there is no need to start the timer at all.
Avoid indefinite process delays of unpaired MoveFrom events by new
MoveFrom events. Restart the timer only if not already active, and
process all events when a 1 second deadline has passed.