"-M secret" is used to verify cryptographic signature of the TCP with the TCP-MD5 option, and now only MD5 is supported.
-M secret
TCP
TCP-MD5
MD5