Fix leak in pki --pkcs7 --decrypt