The encoding of negative ASN1 INTEGERs and the conversion of BNs to negative

integers was completely broken. Also added a NEG_PUBKEY_BUG compilation option
to compensate for public keys improperly encoded as negative integers.