reject nul bytes in ssh certificate key ids and principals (#15970) * reject nul bytes in ssh certificate key ids and principals * check memoryviews for nul bytes without copying
