hsdesc: Replace "first/second" layer with "inner/outer" layer.

This is much clearer, since which layer is "first" and "second" temporally depends on whether you're encrypting or decrypting, while "inner" and "outer" have no such ambiguity.