If the domain separator happens to be exactly the rate, we would previously incorrectly add another rate-bytes of 0s.