I suspect there are a couple more solutions waiting to be discoverd like possible changes in voltage on the flashrom's #WP, #CE and #OE lines. The easiest way is use the Jtag interface and run unitag universal scan and you'll get some color changes when the pin changes and all pins are displayed on screen. Also I think it's set up like a constraints screen where you can drag and drop signal names on to pins.