Attribute certificate implementation

This patch implements attribute certificates (described in attached documentation), which allow a user to selectively disclose additional claims about themselves as assertion presentation time.

IdP and verifier pull requests will be submitted separately once this patch has been reviewed.