ppp: backport security fixes