Port from downstream redhat test for rhbz#1449983

Check for invalid key sizes

Note: this test used to check for ipsec.secrets file permissions, but newhostkey
no longer creates those because public keys and certificates no longer require
a secrets file entry.