secchan: Better tolerate failing controller admission control in fail-open.