clients are believing really old recommended-versions

Clients believe recommended-versions no matter how old the directory is.

Option one: don't check recommended-versions if massive clock skew is detected on the dir.

Option two: remember the timestamp of the last recommended-versions you saw, and discard newly received ones that are older than it.

Option three: both.

[Automatically added by flyspray2trac: Operating System: All]