PKINIT memory handling fix and improvements

This branch includes one commit to fix an unlikely double-free in the PKINIT client code, and another commit to improve the memory-handling practices of pkinit_as_req_create and pa_pkinit_gen_req.