Significant change with key management: in most cases there is no need
(and it is actually incompatible with openssl command line tools) to
work with RSA keys directly.  Instead, most of the calls converted to
use EVP_PKEY* (aka struct ccn_pkey*) directly.