SP downloading and xmldsig-validating remote XML metadata on every start

[Cantor, Scott]

> I'm sure I've seen a .tag file at some point (maybe I'll have to
> watch with strace again) but AFAICT the only backup file is being
> created with a temp name suffix (e.g. metadata.xml.6f20) and renamed
> after signature verification finished.

That's why I don't think it's seeing the ETag, since it isn't saving it off.

-- Scott