Filter socket options correctly

The socket filtering rules were blindly copied from `gen_tcp:listen` so they only allowed the options you *cannot* change later on.