Shibboleth 2.5.1 blacklist of RSA 1.5

[Peter Schober]

* praveen <praveen.pinto at peopleadmin.com> [2013-01-29 17:32]:
> I have verified that the /var/run/shibboleth/security-policy.xml
> also has "false" for includeDefaultBlacklist

What gave you the idea that security-policy.xml lives anywhere else
than right next to shibboleth2.xml (in /etc/shibboleth, usually)?
Also what version and platform/OS is this on?
-peter