Private-key validation is fairly expensive for long keys in openssl,
so we need to avoid it sooner.