Before this commit, only integrity protection was applied.
This was working only if the NAS connection is using NEA0.