Tagging attack on headers

Mixmaster headers have a hash to integrity-check the fields for that hop. But it doesn't check the rest of the header.

So we can flip some bits later in the header, and if we own the node later in the path that corresponds to the header we just broke, we can recognize the message.

We must make the hash cover the entire header.