NTP sync never reaches stratum

R2's clock won't synchronize to NTP server 10.0.0.1. Authentication is on, key 1 is defined, and the server references key 1 — but trusted-key is missing, so R2 refuses to trust the peer. Add the trust so R2 synchronizes.