I noticed all the TM unit tests use `shsnf_len=0`. When I set `shsnf_len=4` (as TC does), I get MAC validation failures on unprotect. Is TM with a transmitted sequence number field supported, or should I stick with `shsnf_len=0`? Thanks!