add a command switch to specify authentication tag length: 0 to disable, 10 by default.