Which of the following statements about Hybrid IKE are FALSE? (Choose two)

A.
The final packet size is increased after it is encrypted.

B.
Only pre-shared secrets or certificates may be used.

C.
SecureClient and Hybrid IKE are incompatible.

D.
TCP/IP headers are encrypted along with the payload.

E.
Any authentication mechanism supported by VPN-1/FireWall-1 is supported.