Instead of returning 0 when sysctl kern.expose_address=0, return a randomhashed value of the data. This allows sockstat to work without exposingkernel addresses or being setgid kmem.
Import small BLAKE2s implementation.