SignAssertions action not needed ?

[Tom Zeller]

> I think it's actually pretty easy, all the components are there.

Apologies for begin so clueless : if assertions in a response are
signed, and then the response containing those assertions is signed,
assuming the same signing parameters, by visually inspecting the
response, the only way I can "see" the difference is by looking at
<SignatureValue/> before and after and confirming it has changed ?

(I mocked up the SignAssertions action and added message signing to
the outbound message handler and was looking for a quick test.)