qat: add cipher/auth only