Window based verification routines

Verifying that a supplied OTP matches, including some fuzzyness based on clock drift/events generated without being verified, is a common enough operation that I feel it belongs in the generic libraries.