setup.rs should include soundness tests for authenticated KEMs.
I.e. specify an incorrect sender key pair and ensure that the the authenticated KEM detects authentication failure.