add process snapshots as a file type.  also, correct bug in identifying
pem certificates.  unfortunately, ghostscript has a leading null, so
the length field can't be eliminated.