tlsdate is the right choice I think. ntp is insecure on hostile networks AFAIK.