Handle Sigsum witness with bad clock #33
Description
Related to the future Sigsum support, PR #32
When running tkey-sigsum-submit we compare the witnesses timestamps with the lifetime of our submit key. If a witness has a bad clock this will stop the submission process.
Perhaps handle like this:
- Detect bad witnesses.
- Remove bad witnesses from proof.
- Verify again against the policy.
- Only fail for real if the policy still doesn't verify.