use AES-NI for transit tunnel encryption