It turns out that setting the IV length is necessary with CCM in OpenSSL.
This adds that back.

Reviewed by: cem