DataSealer dependencies

[Cantor, Scott]

> That would be this option in password-authn-config.xml which defaults to
> false?

Yes.

> I don't plan to change that, and you say the reference in the logout code isn't
> actually used, so I don't think I'm actually using it anywhere, so I should be
> safe to just have a stand-in file to make it start but not actually rotate it.

I'm 99% sure it's not used in the logout code as shipped, Marvin went a different direction and stored the data it was going to be used for in the Java session rather than round tripping it.

-- Scott