Some SP Hub instability underway

[Scott Cantor]

To the extent anyone is testing any of this, just be aware there's some changes "afoot" starting this morning that will be in flux and the documentation isn't updated yet to reflect it.

I am building a new Credential resolver service for the Hub that will ultimately make it simpler to control keys and certificates on a more piecemeal basis, primarily so it actually becomes possible to migrate existing keys for a lot of SPs provided somebody really finds that attractive.

We need this to manage client secrets for OIDC as well.

Tests all pass so it's nominally not breaking anything but it affects the configuration and installation (in a positive way) so the docs have to get changed to reflect all that.

Pulling a Hub snapshot from before today will match up with the current documentation.

I hope to get this stabilized and documented this week, at least on the SAML side.

-- Scott