Use BN_CTX_end when exiting early from BN_mod_exp_mont_word because