Limit ms_tdiff to 1 hour as a sanity check.
Count halts as the equivalent of IO errors, allowing only 5 sequential max before considering the device unusable.