have 'openssl pkcs7' exit with code 1 on error instead of 0.