New PEs

I submitted a new PE here:
http://tools.oasis-open.org/issues/browse/SECURITY-7

It addresses complaints from deployers about the use of the term "pseudorandom" in the definition of the persistent NameID format.

We could consider this on the next call.

I have an additional errata that I'll be submitting soon in response to a new paper that's coming out about vulnerabilities in SAML and other SSO implementations.

-- Scott