dsa-check-mirrorsync: optionally allow some skew over mirror timestamps