Starting work on the shibboleth-sp2 packages

[Scott Cantor]

As an aside, the other tack to take is to change the software to skip
validation by default in all cases, including the initial load. I had meant
to make that an option, but never got around to it.

Basically you'd have a separate package people could install if they wanted
to turn validation on, but leave them out by default.

That's all pretty much "off the top of my head", so for all I know the work
involved for me isn't that minor, but it's probably not too bad.

What is definite is that 2.0 doesn't need to validate messages at runtime,
which is NOT the case with 1.3. They can't be removed from that version
without breaking it.

-- Scott