enable strict IV checking by default during decryption