Metadata signature accepted by xmlsectool, not by SP

[Cantor, Scott]

> I went over everything again, and finally got it to work. The errors I was
> getting are misleading.

Not in hindsight, but that's what I meant.

> Making the change below let it pass the checks. I would have expected an
> error about the schema failing validation, not the signature failing.

It's not failing validation. But I didn't catch that you were validating. That causes default attributes to be populated in the DOM. Using default attributes is (now) known to be a very bad practice but the person who discovered that fact is me, by virtue of this exact example.

-- Scott