Close to Optimally Secure Variants of GCM