secure_seq: downgrade to per-host timestamp offsets