saslserv/dh-blowfish: generate a new keypair (but not a new prime) for each authentication session

surprise, surprise!  the openssl documentation lies.
calling DH_generate_key() will not replace the keypair, so we have to clone the DH structure to avoid
calculating a prime for each authentication.