ntp: use public servers first