Fix tpkt header length checks for encrypted packets