keep ExtensinKey's C counterpart alive correctly

In keeping with our other ownership changes, it seems (at least, the testcase
provided in #27 makes it seem :) that we need to keep this around explicitly.