pub const DEFAULT_LEEWAY_SECS: u64 = 30;
Clock tolerance shared by inbound and exchanged-token validation.