[9.20] fix: usr: `check_private` failed to account for the length byte before the OID

[9.20] fix: usr: `check_private` failed to account for the length byte before the OID

In PRIVATEOID keys, the key data begins with a length byte followed
by an ASN.1 object identifier that indicates the cryptographic algorithm
to use. Previously, the length byte was not accounted for when
checking the contents of keys and signatures, which could have led
to interoperability problems with any zones signed using PRIVATEOID.
This has been fixed.

Closes #5270

Backport of MR !10372

Merge branch 'backport-5270-fix-check-private-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!10376