In the the picture of Section 3.8, the UDP hdr is protected by the AH authentication. It seems wrong to me since the UDP header is added after the AH is calculated. Please clarify.