Upgrade to `rsa` 0.9

There's a new version of the rsa crate; there is API breakage that makes the upgrade nontrivial.