CDS error window too small

Job #2622252 failed for isc-private/bind9@36c4446d40e7765d0fec46109cf9e765ed7c3147:

It looks like we need to allow 10 seconds instead of 3 seconds

also D:cds:stderr did not match '' is spurious. It should only be emitted when we are searching for $err.

I:cds:correct signature inception time (13)
D:cds:stderr did not match ''
D:cds:bad inception time 3609 at checktime.pl line 27, <> line 28.
I:cds:failed
D:cds:exit status does not match 0
I:cds:failed
I:cds:in-place reads modification time (14)

dnssec-cds: child records must not be signed before 20220704070137 (1656918097)
dnssec-cds: which child DNSKEY records match parent DS records?
dnssec-cds: no matching DS for DNSKEY 58053 8
dnssec-cds: found matching DS 38830 8 1
dnssec-cds: no matching DS for DNSKEY 23492 8
dnssec-cds: verify DNSKEY signature(s)
dnssec-cds: skip RRSIG by key 23492: no matching (C)DS
dnssec-cds: found RRSIG by key 38830
dnssec-cds: this is the oldest so far 20220704080146 (1656921706)
dnssec-cds: skip RRSIG by key 58053: no matching (C)DS
dnssec-cds: verify CDS signature(s)
dnssec-cds: skip RRSIG by key 23492: no matching (C)DS
dnssec-cds: found RRSIG by key 38830
dnssec-cds: skip RRSIG by key 58053: no matching (C)DS
dnssec-cds: child signature inception time 20220704080146 (1656921706)
dnssec-cds: from RRSIG DNSKEY by key 38830
dnssec-cds: which child DNSKEY records match new DS records?
dnssec-cds: no matching DS for DNSKEY 58053 8
dnssec-cds: found matching DS 38830 8 1
dnssec-cds: no matching DS for DNSKEY 23492 8
dnssec-cds: verify DNSKEY signature(s)
dnssec-cds: skip RRSIG by key 23492: no matching (C)DS
dnssec-cds: found RRSIG by key 38830
dnssec-cds: skip RRSIG by key 58053: no matching (C)DS
dnssec-cds: debug 1: calling free_rbtdb(cds.test)
dnssec-cds: debug 1: done free_rbtdb(cds.test)
dnssec-cds: debug 1: calling free_rbtdb(cds.test)
dnssec-cds: debug 1: done free_rbtdb(cds.test)