# The command to reload the nameserver domains list.
$reload_command="sudo ndc reconfig 2>&1";
+
+# When we consider a signature to have expired and so to be rejected.
+# Intended to help prevent reply attacks. Value is in seconds and the
+# signature can be +/- this many seconds from current time before being
+# rejected.
+$expiry = 7200;