Note the BN_mod_exp_word bug. (Markus Friedl provided a test program.)