fix: add note about setting system time

quorum-key-management/src/hybrid-key-provisioning.md

@@ -63,6 +63,11 @@ don't. More notes on selecting hardware can be found [here](one-time-use-hardwar
 
 9. Button mash to ensure adequate entropy on the OS
 
+10. Set the system time as it has to be after the PGP
+public certificates were created, and before they expire:
+
+    * `date -s "YYYY-MM-DD HH:MM:SS"`
+
 10. Run `ceremony.sh`
 
 11. Back up the `shardfile`, and `pub.asc` to 3 separate SD cards,