experimentally tweak canary/update watch time

also fix system_domain_organization default; CC expects a falsy value if not
set