starter: Add an 'ah' keyword for Authentication Header Security Associations