Advance tail buffer cleanly (cf. commit 802a0b7b)

* onetime
  (PadSession._verify_digests): Advance tail buffer on each iteration.
  (PadSession.finish): Don't advance tail buffer to adjust for digest
    lengths anymore, because _verify_digests() handles that now.