TCPCT part 1b: generate Responder Cookie secret