cryptosoft: Reject AES-CCM/GCM sessions with invalid key lengths.
Reviewed by: markj
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D33195
(cherry picked from commit c172a407fb0d2e6b4389625ebf604b5a2f831054)