fix the first octet of the generated MAC
so we don't accidentally create multi-cast addresses, or addresses
that claim to be vendor-assigned