When parsing, reject >1024-bit RSA private keys sooner.

Private-key validation is fairly expensive for long keys in openssl,
so we need to avoid it sooner.