Secure Time-Aware Provenance for Distributed Systems