Use running hashes as authenticated data.

This provides the same malleability guarantees as Grump's asynchronous message format.