added parameter 'additional_restricts', to allow putting more restrictions in ntp.conf