make the HA hook multi-threading safe

Currently it is a design ticket to find remaining problems, for instance the HA hook disables packet processing but with MT there are more than one way to do this (and the feature by itself can be required to be MT safe).

Note this ticket can provide some indications for #1147 (closed) i.e. not try to avoid races when they are unconditionally impossible.