tcp: properly handle md5sig_pool references