System Administration Guide, Volume 2

Verifier Returned to the Client

The server returns a verifier to the client, which includes:

The reason for subtracting 1 from the time stamp is to ensure that the time stamp is invalid and cannot be reused as a client verifier.