AH encrypt; don't double enqueue nor emit clib_warnings when seq-num max exceeded