emailRewrite is the testing feature that allows us to test via `test-moz-idp.com`.  If you type lloyd@test-moz-idp.com it will map it into lloyd@mozilla.com.  The ultimate certificate issued will be at @test-moz-idp.com.  This lets us test in the staging environment before going live.