And if you haven't looked at it yet, you should probably look at Network Time Security (NTS). https://www.netnod.se/knowledge-base/What-is-Network-Time-Se...