Shib 3.x & alternate credentials

[Dave Bartholomew]

> try using the correct syntax...

Same problem.

While troubleshooting this, I've left the encryption key pair at the
installation default, so there's a metadata mismatch (although it's not
"used"). Do you suppose there may be a check that *both* key pairs are OK
when the SP is within an override but not so when it's hit as the default?

--Dave