This is a good point and we might need to change things because of this; it depends on what client needs turn out to be. But I'm hoping that the software-updat

This is a good point and we might need to change things because of this; it depends on what client needs turn out to be. But I'm hoping that the software-update mechanism is the foundation of any modern system, and that can use nonces to show freshness. It's fairly common for systems to update immediately on power-on and hopefully that will get the fresh Roughtime server-list that allows the rest of the system to come up. (The alternative is that we try to guarantee that Roughtime servers will never change, and that's very hard.)