crypto: add support for loading encrypted x509 keys