make sure default ntpd config is restrictive