crypto/openssl: fix AAD capabilities for AES-GCM