Don't leak an ASN1_OCTET_STRING on error in rsa_cms_encrypt