pub fn next_attempt_at(now: DateTime<Utc>, delay_secs: i64) -> DateTime<Utc>
Spreads a batch that failed together, so it does not come back as one thundering herd.