AEAD OpenSSL fixup - load tag before doing any crypto operations, because
old versions of OpenSSL break otherwise.