Not compliant with specs for encrypted elements

[tvdijen]

This needs fixing

<xenc:EncryptedKey> [Zero or More]

Wrapped decryption keys, as defined by [XMLEnc]. Each wrapped key SHOULD include a
Recipient attribute that specifies the entity for whom the key has been encrypted. The value of
the Recipient attribute SHOULD be the URI identifier of a SAML system entity, as defined by
Section 8.3.6