Tweak vanity onion scheme to avoid producing invalid keys

Yawning says that the vanity onion scheme should add 8 and 8*B rather than 1 and B, so that the last 3 bits of the secret key are always valid.

Please see my branch prop224-horse on https://github.com/teor2345/torspec.git