Since SO_ACCEPTFILTER is enabled by default on systems that have the SO_ACCEPTFILTER define, then that binary will break on any other systems. It isn't good to gratuitously break backwards binary compat. So might it be wise to also accept an ENOPROTOOPT return code as "ok"? Since that is what you should get if you call setsockopt() on an undefined option.
