Let's assume the time server is not trusted. How accurate does the clock have to be? Is +/- 30 minutes sufficient for Tor's correct operation? Do you see any risks if the user manually adjusts the clock on each restart?