Decrypt the tunnel build reply records. This overwrites the contents of the reply.
Thread safe (no state).
Note that this layer-decrypts the build records in-place.
Do not call this more than once for a given message.
status for the records (in record order), or null if the replies were not valid. Fake records
always have 0 as their value