This prevents the first peer after the gateway from looking at the encrypted data received and seeing "hey, none of the checksum blocks match the payload, they must be the gateway".