EdDSA small order points not handled correctly.

In   'sign_verify/eddsa_small_order_points.https.any.js', it seems that our handling of small-order keys doesn't follow the standard. The expected behaviour is:

- `subtle.importKey` should succeed
- `subtle.verify` should not throw
- `subtle.verify` should return false