Metadata Generation

[Rod Widdowson]

> As long as we're talking about it, can I suggest we not use the names you
> used for those Jetty TLS/SSL keys?

Absolutely.  

> Using tls and ssl to mean separate things is not ideal. I would probably
> suggest sticking with backchannel for the SOAP key but "userfacing" for
> the front channel.

Idp-backchannel.p12
Idp.userfacinf.p12

it is. 

I'll make this change tomorrow.  I'll try to remember to make the upstream
changes as well do that idp-testbed and idp-integration test continue to
work