Remove NO_MSI_DIGITALSIGNATUREEX ifndefs.
Add sanity check for the potentially 'dangerous' combination of -add-msi-dse and -nest.

We don't want osslsigncode to emit bad signatures when we can avoid it.