Server-side trustee generation: take the private key x modulo q

The client-side version (in JavaScript) already does it. The group
order is q, which is a factor of (p-1). It doesn't make much sense to
take x modulo p.