crypto/cnxk: add anti-replay as per new firmware