We depend on the api server and the keycloak server being in sync
so we can decide if the tokens are valid.

Make sure the system times are within the configured leeway.