ntpsigndsocket  /var/lib/samba/ntp_signd
restrict default mssntp