Supporting encrypted SAML 1.1 tokens in HTTP headers.