If our system clock jumps back in time, don't publish a negative

uptime in the descriptor. Also, don't let the global rate limiting
buckets go absurdly negative.


svn:r9377