Restrict GCM tag length to 4+ bytes

OpenSSL will cheerfully let you pass down to 1 byte. NIST vectors only go down to 4 bytes, so this patch requires 4+ bytes passed and adds a note to the docs about it.