Depends what the tool is for.  If you ever intend to use it as a regular time
clock you either must trust the end users or use the server side time.