gcm128.c: allow multiple calls to CRYPTO_gcm128_aad.