If we want to disallow < 1024 in general we could enforce this in RSAPrivateKey.generate in #582 rather than each individual backend.