add swap for encrypt-then-mac ... slow build starts now!