Don't initialize context value; may clobber non-pointer sized values
remove extraneous break
update for -03, explicit protocol opt for mutual auth
allow RP to force XRT even if initiator didn't request it