Android's VpnService.protect() itself is confusing, so we rename the
"protect" feature with the name `fdControlUnixSocket` and make it a
sub-option under `quic.sockopts`.
A unit test is added to make sure the protect feature works.
I also added two other common options to `quic.sockopts` that I copied
from my other projects but did not fully test here.
