Make pkinit fall back to octetstring2key() if there are not matching KDFs