tls: rx: always allocate max possible aad size for decrypt