Place for beans related to metadata providers?

[Cantor, Scott]

I have more to do, but I did an initial refactor:

conf/security.xml - the global black/whitelists

system/conf/security-system.xml - some parent beans to hide the 
Basic*Configuration classes and apply the white/blacklists by default


system/conf/metadata-providers-system.xml - the factory bean with various 
optional beans injected to override the factory bean's properties


I think this is sufficient for the metadata side of this, I just have more 
work to do on the relying party side. I'll be moving more global defaults 
up into conf/security.xml.

I'll evaluate, but I'm not sure we need a security.properties at this 
point.

-- Scott