Don't leak the exponent bit width in BN_mod_exp_mont_consttime.