Moving the key_info data from the key_descriptor namespace. The saml 2.0
reference doc says that x509 can optionally be set inside assertion elements.
This guarantees that the certificate gets passed along with the assertion
whenever it is signed in absense of the entire saml response being signed.