perform post-finalization modification checks by not using openssl, before altering the log state (redone vs. undone) (fix #6)