票据年龄环绕检查破坏了 TLS 1.3 和 DTLS 1.3 的早期数据新鲜性检查

While looking into an intermittent early data test failure, I found that the server can decode a ticket's age as zero when the client's addition of `ticket_age_add` wraps. That can make it reject valid early data or accept an age that should fail the freshness check.