Fixes #4226: Add the CFEngine logic to use DENYBADCLOCKS