Keep a not of original encoding in certificate requests. Add new option to PKCS7_sign to exclude S/MIME capabilities.