Function since_secs 

fn since_secs(at: SystemTime, now: SystemTime) -> u64

How long now is after at, saturating: an at in the future reads as the longest age, so a skewed stamp never silences a rung.