Is additional_key_data actually optional?  The `backend._CipherContext` doesn't treat it as such.