mptcp: strict validation before using mp_opt->hmac