20160111-secure-frame-enc-alpha: TODO-632: allow empty plain/cypher text

Either the plain/cypher text or the auth text can be empty
(though not both).

So we can, for example, authenticate an empty beacon frame.