fix per-device CAL licensing

This patch fixes per-device CAL RDP licensing.  The changes include:
* having the crypto_rsa routines return the length of the encrypted block
* adding the EXTENDED_ERROR_MSG_SUPPORTED flag during licensing
* copy the certificate's modulus as an encryption parameter, rather than zeroes
* save the length of the encrypted pieces passed back and forth, which is not a constant