Enforce a strict output length check in CRYPTO_ccm128_tag