rsa.c: fix incorrect guard for pvk-* options