Add better SSL certificate validation when fetching time. Modify duo_web to remove the need for NTP