eBPF traffic control filter to mark Source2/CS2 server queries as password-protected