daemon/tls session tickets: avoid bad scheduling cycles

This should fix #385: possible floods with
> scheduling rotation check in 0 ms
18 jobs for tls-tickets-0ms
in 8 minutes and 25 seconds and was queued for 7 seconds