Let 'openssl req' fail if an argument to '-newkey' is not