Support for traditional OpenSSL and PKCS8 RSA private key serialization

This temporarily uses the backend to do it until the alternate approach is ready. DSA/ECDSA and public key support will follow if this is deemed worthy.
Seconded -- perhaps NoEncryption could be a default, though, and that could be the only option allowed in the public key case so it would be as if that argument didn't exist there.