Don't zap AES CBC IV, when decrypting truncated content in place.