backupkey: replace heimdal rsa key generation with GnuTLS