Allow IdP to be marked as AA only

As a stop gap allow an IdP to be marked as AA only.

When this occurs the Metadata Renderer should only output the collaborating AttributeAuthorityDescriptor and not the main IDPSSODescriptor.