PKCS#7: Handle PKCS#7 messages that contain no X.509 certs