add RSA private key generation restrictions to primitive layer