As of TLSv1.3 draft-25 the record header data must be used as AAD
Reviewed-by: NBen Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/5604)