See the discussion starting here: https://github.com/bitcoin-core/secp256k1/pull/936#issuecomment-831473420