Congress and small business advocates are working on a series of fixes for a new Department of Defense cybersecurity certification program they fear will otherwise be a major disincentive for smaller, nontraditional defense suppliers to bid on Air Force and other defense contracts.