ec_key:  Add release()
CKeyDeterministic:  Return ec_key, not EC_KEY*