Making --certify set NO_CHANGES certification instead of FILL_FORMS

[vktr]

Hi!

I'm signing documents like this,

pyhanko sign addsig --certify --timestamp-url <valid-tsa> --with-validation-info pkcs11 --p11-setup yubihsm dummy.pdf dummy_signed.pdf

This works great and validates correctly in the tools I've tried (EU DSS among others).

Our one thing is that I need the --certify flag to set NO_CHANGES instead of FILL_FORMS, and today I've patched the sources to accomplish this (just changing the value of the MDPPerm.FILL_FORMS to 1).

However this seems hacky and I was wondering if there is a simpler way of accomplishing the same thing, either a missing CLI flag or if it's easier via the API.

Thanks for a great lib!

[vktr]

It's me again - I could achieve what I wanted via the API. Thanks again!