allow accepting encrypted SAML messages with a cert, without publishing it for signing
allow accepting encrypted SAML messages with a cert, without publishing it for signing

Change-Id: I82bb979040b964d530c9b6ba3b3584d26cad6c85
Reviewed-on: https://gerrit.instructure.com/189641
Reviewed-by: Rob Orton <7e09c9d3e96378bf549fc283fd6e1e5b7014cc33@instructure.com>
QA-Review: Rob Orton <7e09c9d3e96378bf549fc283fd6e1e5b7014cc33@instructure.com>
Product-Review: Rob Orton <7e09c9d3e96378bf549fc283fd6e1e5b7014cc33@instructure.com>
Tested-by: Jenkins

instructure/canvas-lms,sfu/canvas-lms,sfu/canvas-lms,instructure/canvas-lms,sfu/canvas-lms,instructure/canvas-lms,djbender/canvas-lms,djbender/canvas-lms,djbender/canvas-lms,instructure/canvas-lms,instructure/canvas-lms,sfu/canvas-lms,instructure/canvas-lms,djbender/canvas-lms,sfu/canvas-lms,sfu/canvas-lms,instructure/canvas-lms,sfu/canvas-lms