Includes changes for MN-ITS integration for MN

Includes code and tools for integration with MN-ITS.  These changes
support the credentialler/providerenrollment roles.  These changes allow
the pe role to access specific providers from posts from MNITS, while
also obfuscating data that a given credentialler/providerenrollment role
should not see.