A safe version of the x448 function defined in RFC448.
Currently, the only reason I can think of for using the raw function is FFI.
Option is FFI safe[1]. So we can still maintain that the invariant that
we do not return a low order point.
[1] https://github.com/rust-lang/nomicon/issues/59