Only negotiate an AEAD mode when using 1.2
GCM garbled nonces after one message
In Channel, pre-size the IO buffers to 16K to avoid excess allocations.

Translate Integrity_Failure exceptions to bad_record_mac
Add support for AEAD modes in TLS. Add GCM ciphersuites.