Fixes #4226: Add the CFEngine logic to use DENYBADCLOCKS and SKIPVERIFY

http://www.rudder-project.org/redmine/issues/4226