Fixes #1200 -- disallow GCM truncation by default

recommended