diff --git a/python-package/pyproject.toml b/python-package/pyproject.toml
index b0e3bde..198708f 100644
--- a/python-package/pyproject.toml
+++ b/python-package/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pyatls"
-version = "0.0.5"
+version = "0.0.6"
 description = "A Python package that implements Attested TLS (aTLS)."
 readme = "README.md"
 authors = [{ name = "Opaque Systems", email = "pypi@opaque.co" }]
diff --git a/python-package/src/atls/validators/azure/aas/aci_validator.py b/python-package/src/atls/validators/azure/aas/aci_validator.py
index 7d428a2..757e2a7 100644
--- a/python-package/src/atls/validators/azure/aas/aci_validator.py
+++ b/python-package/src/atls/validators/azure/aas/aci_validator.py
@@ -2,6 +2,7 @@
 import hashlib
 import json
 import logging
+import os
 from datetime import timedelta
 from typing import Any, Dict, List, Optional
 
@@ -251,10 +252,14 @@ def _verify_and_decode_token(
     """
     hdr = jwt.get_unverified_header(token)
 
+    max_skew: int = int(os.getenv("PYATLS_CLOCK_SKEW_SECONDS_MAX", 5))
+    delta = timedelta(seconds=max_skew)
+
+    logger.debug("Max allowed clock skew is %s", delta)
+
     return jwt.decode(
         token,
         _get_key_by_header(hdr, jkus),
         [hdr["alg"]],
-        # Account for clock skew
-        leeway=timedelta(seconds=5),
+        leeway=delta,
     )