explicitly define the GCM tag/mac too