RegistrationAuthority in PolicyRequirementRule

[Leonard J. Peirce]

In testing IdP V3 I've attempted to use the PolicyRequirementRule found at

    https://spaces.internet2.edu/display/InCFederation/Essential+Attribute+Bundle+Config

for releasing attributes to SPs registered by InCommon.  In attribute-filter.xml
I created a small test policy (removing the saml: prefix found at the link above):

     <AttributeFilterPolicy id="example2">
         <PolicyRequirementRule xsi:type="RegistrationAuthority"
             registrars="https://incommon.org"/>
         </PolicyRequirementRule>
         <AttributeRule attributeID="eduPersonScopedAffiliation">
             <PermitValueRule xsi:type="ANY" />
         </AttributeRule>
     </AttributeFilterPolicy>

But in idp-warn.log I get:

    net.shibboleth.utilities.java.support.service.ServiceException: 
org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 11 in XML document from file 
[/opt/shibboleth-idp/conf/attribute-filter.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 11; 
columnNumber: 11; The element type "AttributeFilterPolicy" must be terminated by the matching end-tag "</AttributeFilterPolicy>".

Using the PolicyRequirementRule at

    https://wiki.shibboleth.net/confluence/display/IDP30/RegistrationAuthorityConfiguration

that looks like

         <PolicyRequirementRule xsi:type="AND">
             <Rule xsi:type="EntityAttributeExactMatch"
                 attributeName="http://macedir.org/entity-category"
                 attributeValue="http://refeds.org/category/research-and-scholarship"/>
             <Rule xsi:type="RegistrationAuthority" registrars="http://my.federation.org"/>
          </PolicyRequirementRule>

gives no errors.

Perhaps I've been staring at this for too long.  Am I missing something obvious?

TIA...

- Leonard