Accept 1016 instead of 1024 bit for DSA keygen
    
    Sometimes NSS will give us a key that it calls 1016 bits when we askf ro
    1024.  It's rounding down to a byte boundary, so we settle.