compatibility of HoK profiles

Nate, can you reference the "Holder-of-Key Assertion Profile" in the
"Holder-of-Key Web Browser SSO Profile"?  If I change the Conformance
section in the former to require only ds:X509Certificate as "mandatory
to implement," then I believe the "Holder-of-Key Assertion Profile" is
(or easily can be) compatible with the "Holder-of-Key Web Browser SSO
Profile".

Comments?

Tom