Which of the following statements, about Hybrid Ike, are FALSE? Choose two.

A.
The final packet size is increased after it is encrypted

B.
Only pre-shared secrets or certificates may be used.

C.
SecureClient and Hybrid Ike are incompatible

D.
TCP/IP headers are encrypted along with the payload.

E.
Any authentication mechanism supported by VPN-1/Firewall-1 is supported.