chrony source priority drift pushes one site out of acceptable Kerberos time skew

NTP is technically running everywhere, but one location follows a lower-quality source and drifts just far enough to break time-sensitive authentication.