Swap `ring` for our own in-crate RSA validator