[WIP] deprecate concrete RSA*Key classes

refs #1026

Not ready for merge because backend providers and a migrated generation function need to land first.