This change adds documentation about PKCS-8 vs PKCS-1 pitfalls. It also provides a command to convert encrypted PKCS-8 RSA keys to encrypted PKCS-1 RSA keys. Fixes #5453