Remove encryption cert because SP doesn't actually support it, sigh

nefed.xml

@@ -18372,13 +18372,6 @@ bHwSoBy5hLPNALaEUoa5zPDwlixwRjFQTc5XXaRpgIjy/2gsL8+Y5QRhyXnLqgO67BlLYW/GuHE=</ds
                     </ds:X509Data>
                 </ds:KeyInfo>
             </KeyDescriptor>
-            <KeyDescriptor use="encryption">
-                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:X509Data>
-                        <ds:X509Certificate>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</ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
             <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
             <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://loginxq1.fidelity.com/ftgw/Fas/NBExternal/NBPartSSO/InboundSSO/consumer/sp/ACS.saml2" index="1" />
         </SPSSODescriptor>