1 - integration with initiator-side EAP channel bindings
2 - integration with final supplicant architecture
5 - fix ABNF: no slash in the case where there is no host
6 - always intern OIDs so they never need to be freed
8 - handle many-to-many Shibboleth attribute mappings; need to encode
9 both attribute and value index into more
10 - add --with-xerces option
11 - proper acquire_cred_ext implementation
12 - MIC on flags token (merge ext-mic branch)