hmm, needs a variable from apache::mod::shib