Scriptable DataSealerKeyStrategy Question

[Cantor, Scott]

Untested example but should be close enough. There are some gaps in the c'tors to create the EvaluableScript objects that I'll patch now (e.g. using a File to build one requires specifying the script language also), but it's nothing fatal for the time being. I forgot that class was a bit low level, we haven't used it directly much.
 
<bean id="MyDataSealerKeyStrategy"
	class="net.shibboleth.utilities.java.support.security.impl.ScriptedKeyStrategy"
	p:updateInterval="%{idp.sealer.updateInterval:PT15M}">
	<property name="keyScript">
		<bean class="net.shibboleth.utilities.java.support.scripting.EvaluableScript">
			<constructor-arg name="engineName">javascript</constructor-arg>
			<constructor-arg name="scriptSource">
				<bean class="java.io.File" c:pathname="%{idp.home}/conf/keyStrategyScript.js" />
			</constructor-arg>
		</bean>
	</property>
</bean>

The idp.sealer.keyStrategy property should be used to enable it with the global-system.xml change that's necessary for this to be pluggable.

I think I described the script contract I defined before, but if I didn't please tell me and I'll put something together.

The best place to write something up on this is in the KB wiki space as a how-to.

-- Scott