aes_gcm_cleanup() should check that gctx != NULL before