Only check for possible IV duplication after the MAC is valid.
Add replay protection to DATA packets via a sequence number, really need to implement REKEY support next.
Increment before testing when deciding to flip the cache or not.
Added preliminary stat tracking and cleaned up app apis a bit.
Remove the HEARTBEAT(+ ACK) packets.  Add untested and incomplete REKEY support.
Make REKEYING work.