call-rsa: free modulus buffers on error paths.