DH: document, prefer smaller generator
DH: reject g^x = p - 1 too

simple degenerate-order constructions lead to this