If the low byte of the stack cookie happens to be zero, we previously wouldn't trigger any error. This avoids accidentally failing to trigger the stack protector once per 256 runs, roughly.