Russ, I'm happy to implement whatever solution is decided for this. However it would be good to get discussion on how to approach separating the aspects from /etc/shibboleth that are apache-specific from those that are not.