document future transition to AES-GCM-SIV as possibility