s390/zcrypt: move ap_msg param one level up the call chain