With tlsdate no longer being available in Debian stable (#24), we have switched back to using Debian's default ntp configuration.
This is not ideal, however it appears to be the most functional option at the moment. The solution must be available in Debian stable, test and Sid.
