gensec: add GENSEC_FEATURE_SIGN_PKT_HEADER flag