mask sdwdate when using kicksecure templates

Qubes-Whonix-Gateway as ClockVM
https://phabricator.whonix.org/T387

Some recent related discussion how this could be sorted out here: whonix-ws-16 Template fails to update due to timing issue