NL_AUTH_SIG_SEAL_SIZE
hdr->auth_length = NL_AUTH_SIG_SEAL_SIZE;
CTASSERT(NL_AUTH_SIG_SEAL_SIZE == sizeof (*nas));
if (hdr->auth_length < NL_AUTH_SIG_SEAL_SIZE)