Count the cookie cache by its bucket count and the TFO option cookie by
to_tfo_len, bound cookie and key arguments by their lengths, and declare
single-object locals __single. No functional change without the flag.
Sponsored by: The FreeBSD Foundation