shibboleth-resolver update

[Cantor, Scott]

> OK, that's good enough for us. Xerxes is independently
> maintained in Debian, but we can pick up a fork for
> Shibboleth if we must.

To be clear...*not* my intention at all. I don't want to do the work anymore than you would, but he's pushing my last nerve at this point and for my own sanity I had to just force the issue.

I would never diverge the API at all, it's a question of whether he actually does any security fixes or not, and hoonestly if I had to fork, you'd be stuck with open security issues in the original package because that's the only reason I'd do it.

-- Scott