Require node clocks to be in sync
Do not trust any keys by default
Don't allow whole subnet to access policy hub by default