Add after-failure config flag checks for net/packet checks.

Obviously these have been forgotten, but are not marked with
@GlobalConfig. Using after-failure checking, because the raw config
getting and accessing might be slightly heavy-ish.
Update comments on cow mappings (problematic: equals/hashCode).