s3-seal use gensec_[un]wrap() instead of gensec_[un]seal_packet()