GuardMgr: Resolve a `TODO pt-client` by having `update` take an `Instant`.
You may ask, why do we need both?
The reason is, basically, that we expire objects from the outside world based on wallclock time, but we retry failed guards based on "real" monotonic time.