Saw this paper via Reyk Flöter's tweet [1] noting work done in OpenNTPD around constraints [2].

[1] https://twitter.com/reykfloeter/status/1357311912623689729

[2] https://marc.info/?l=openbsd-tech&m=142356166731390