enabling advanced embargo re #925, also includes some shibboleth-related configurations