Accept responses with encrypted assertions that are signed only at the response level.  (was requiring signature at assertion level in this case)