samlp: add instructions to encrypt assertions