Bump up PSK length, and add a zero check for x448.

[chris-wood]

The check isn't required per RFC 7748 (it's a MAY), though most x25519 implementations do it, so let's just match for parity.