Correction: does not apply to ntp package. I seem to have looked for it on the wrong machine (one that was in fact using ntpsec).
And apologies for the link munging - I've been forced to route through sendgrid ever since the connection here was upgraded to fiber, and despite repeated claims to the contrary, it does block outbound SMTP. The fix is in commit a0e5e050dfbdb672459f74bf52562bc8fc50c3b9 in ntpsec's github repo. -- The only non-renewable resource you truly have is your time. -- Clay Johnson