arp xml - remain only elements where PermitValueRule is set

we experienced problem that shib-idp has issue to consume arp after when number of policies is to high.
leaving only permited values and removeing deny (where appropriate) decreased the size significantly.
Off course it's still needs improvemnts #131