Actual GSS-TSIG rekey interval is longer than rekey-interval value
We've noticed that rekeying of GSS-TSIG key almost always involves additional
retry-interval seconds after the value specified in rekey-interval
For details, kea-dhcp-ddns config and a suggested patch see: RT 20794