Handle c / ad overlap in crypto_aead_chacha20poly1305_encrypt()