when computing sys_authdelay

get_systime() calls ntp_random() which is slooow.

  If you tell it the host name, it does the host name checking
  automatically as part of SSL_accept().  You don't get a
  chance to check the noval flag.

This bug/quirk is in ntp classic.  Many comments say "minimum distance"
  PROTO_MINDISP => PROTO_MINDIST
  MINDISPERSE => MINDISTANCE

  Change an isprint to isgraph

The overhead for RAND_bytes() is huge.
We could save a few cycles by getting 10 or 20
chunks at a time.