stricter asn parsing

Check trailing bytes after ASN parse *everywhere*. It's what I wanted to do from the start.

Mitigates some [attacks](http://www.imc.org/ietf-openpgp/mail-archive/msg06063.html), too.