RE: [security-services] SubjectConfirmation errata

> The phrase "distinct from the identifier in the enclosing subject" is 
> the source of the problem.
> 
> Do we really need it here?

Probably not. I think my intent there was more along the lines of the SAML
"strong matching" rules, which while vague, seem to mean that the XML itself
has to match.

-- Scott