tools/sign-msi.py: add 'allow-already-signed-content' and 'trusted-leaf-sha512s' config options.