Provide GCM, but allow any cipher.AEAD instance.