Adds two comments to clarify 1) why an offset is used in the call to psa_aead_verify() and 2) why the test of .hits_finish is always 0 in this test case. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>