Before we consider what the AH protocol can do, first
consider what parts of the IP header are going to change en route.
These mutable fields will not be protected by AH simply because
they can change in normal routing.
The mutable IPv4 fields are Type of Service (TOS), Flags, Fragment
Offset, Time to Live (TTL), and the header checksum. If protection
is needed for these fields, one can always IP/IP tunnel.