Errors after Relying Party Service Reload

[Cantor, Scott]

> So we don't have to update relying-party often.  The usual case is to
> turn off encryption for SPs that don't support it.

I've done some grouping things with my locally maintained metadata so that I can set up those policies based on the groups. It doesn't work for InCommon (which I've noted by asking for tags in metadata that identify SPs with functional limitations) but it works well for local stuff.

-- Scott