Fix `ssh2.0.11-keyderive-nonbug' on the strength of Ben's analysis.