Maximizing Small Root Bounds by Linearization and Applications to Small Secret Exponent RSA