tcp: protected initial connection loop reads