+ *) Initialise "ex_data" member of an RSA structure prior to calling the
+ method-specific "init()" handler, and clean up ex_data after calling
+ the method-specific "finish()" handler. Previously, this was happening
+ the other way round.
+ [Geoff Thorpe]
+