Turn BN_prime_checks into a macro. Primes p where (p-1)/2 is prime too are called "safe", not "strong".