Time sync fixes itself minutes after boot but TLS clients keep failing

A rebooted host later shows good time sync, but services started during the skew window continue failing outbound auth or API calls.