I have the same problem, maybe generating a new PDF from the server, but this closes the door to uploading digitally signed pdf's (because the resulting pdf would not have this signature of course). It also adds load to the server. Apart from privacy issues