advanced syncookie implementation


FreeBSD version untangled, KNF'd etc

all glue rewritten
pf and the stack have different needs

hash function replaced by siphash

arc4random_buf() for the secrets

key rotation using the timeout API
timeouts and keys delete if syncookies get deactivated