Use the TLSv1.3 record header as AAD