pub fn request_aad(r: &Request) -> Vec<u8> ⓘ
A CALL’s or STREAM_OPEN’s AAD. Its nonce is 12 zero bytes: k_req seals exactly one payload.