Support for traditional OpenSSL and PKCS8 RSA private key serialization

This temporarily uses the backend to do it until the alternate approach is ready. DSA/ECDSA and public key support will follow if this is deemed worthy.
We don't make much effort to ensure that this is actually even a vaguely good configuration let alone the best possible configuration in our backends right now :-/