tcp: syncookies: mark cookie_secret read_mostly