don't allow setting of binary SAML attribute values, for now