Add some more consistency checks in tls_decrypt_ticket.