tcp: make challenge acks less predictable