minimal client-side support for RSA_PSK_AES cipher