v3 Status Handler CIDR ACL

[Tom Zeller]

> It's just different from the default Jetty distribution behavior

I guess what I did with jetty-base in idp-distribution is confusing,
I'll try to explain a little.

I was hoping to provide IdPv3 as a Jetty module, comprised of
modules/idp.mod and start.d/idp.ini, so that it would follow the Jetty
9.1+ convention for deployment into a deployer's existing Jetty
instance. So that's why all of the properties are in start.d/idp.ini.

However, jetty-ssl.xml and jetty-deploy.xml needed to be overriden,
and rather than being modular, I went with a "monolithic"
etc/jetty.xml configuration.

It's also probably wonky that the idp-distribution's jetty-base uses
jetty-deploy.xml because we probably don't intend for anyone to deploy
other webapps via idp-distribution.