auth: Avoid double free in key parsing