RSA PSS Signing

With bonus "can't trust OpenSSL not to segfault" protection code.