Enforce ARSN only with Auth or AEAD

[dccutrig]

These checks may not be present in all three 'flavors' of SDLS at present.

Per CCSDS 3550b2:

4.1.1.4.4 If authentication or authenticated encryption is not selected for an SA, the Sequence Number field shall be zero octets in length.