Do the error handling in pkey_rsa_decrypt in constant time