Don't validate a SAML Subject Cert if it's HOK + a signed Assertion

git-svn-id: https://svn.apache.org/repos/asf/webservices/wss4j/trunk@1469774 13f79535-47bb-0310-9956-ffa450edef68