fully marshal dh groups

Avoid reliance on ad-hoc key marshalling from `nocrypto`.

Harmonizes with https://github.com/mirleft/ocaml-nocrypto/commit/3cea42f7f3f254865ffa4c1d51dfd3b4d10aff27, which removes it.