a copy of some of the cxf saml code.  Trying to understand how to use
saml HOK and Bearer in cxf client and endpoints without an STS, by
relying on Mutual TLS.  Much further cleanup and simplification and
reading required before I understand what is happening.