Support decoding PKCS#8 keys
These are generated by OpenSSL v3. Previously, key decoding would fail, breaking federation.
This fixes #14