AME-3457, AME-3458, CR-3488. Issuing SenderVouches and HolderOfKey SAML2 Assertions from the TokenGenerationService