secur32: We can't read more than expected_size - 5 in schan_DecryptMessage().