Don't require tag before ciphertext in AESGCM mode