There are additional fields in the authentication header that could be utilized such as the packet number and stateless reset token.