pub const MAX_CLOCK_SKEW_SECS: i64 = 60;
A signed request whose timestamp is further than this from the hub’s clock is refused. Replays inside the window are stopped by the strictly increasing timestamp, not by the window.