ESAPISecurityConfig hides current validators

[Cantor, Scott]

> We are missing the rationale for such change and we are probably
> misunderstanding the implementation of ESAPISecurityConfig.
> --> Could someone please clarify?

I think the answer to your issue is covered here:

https://issues.shibboleth.net/jira/browse/JOST-195

I published snapshots of the upcoming releases of all the 2.x libraries to Nexus earlier today.

-- Scott