extract metadata setting for whether signed assertions are prefered
wrap x509 setting to remove junk
add identifier attribute
some persisted metadata stuff