PKCS #1: Enforce minimum padding for decryption in internal TLS