Reserve enough space for GCM tag in TZ backend