If SEI data length > 10% of VCL (coded slice) data, flag as suspicious. In our prototype, SEI averaged 18% of VCL.