OpenSSL key resources are shared, only PKeyFactory should free them