inner Int64 shim
tag/len: bounds check: now arch sensitive
secure OID parsing against overflow

... but it still doesn't accept large components
test oid overflow