Move settings from Policy to RelyingParty to allow per-RP values.