Add a content-type signed attribute to SCEP reqs
    
    The spec doesn't call this out as required, but the examples in it
    always have it (along with the signing time, which we already included).