Fix a leak in ktls_decrypt().

ktls_decrypt() allocates an iov, but never free's it.
This one line change fixes it.

It might make more sense to make "iov" and "iov_cap" static instead,
but I'll let jhb@ decide.