CipherInputStream does not protect integrity for AEAD modes