contrib/smime.rc: $smime_verify_opaque_command fallback to -noverify to get signed text despite a failed -verify (but send only this first failure notice to stderr). smime.c: fflush() before rewind(). Closes #2428. Helps Debian Bug 420014