const FUTURE_CLOCK_SKEW_TOLERANCE: Duration;
How far into the future a timestamp may sit before we treat it as tampering rather than clock skew. 1 hour swallows reasonable NTP drift.