Remove md:RoleDescriptor elements from imported metadata.

These elements require additional schema definitions to be useful, and if those are not present at consuming entities schema validation errors will occur. We therefore strip them out entirely. This will mainly affect ADFS entities, but won't immediately allow those to be accepted as they also tend to have invalid AssertionConsumerService bindings.

mdx/clean-import.xsl

@@ -22,6 +22,9 @@
 	<xsl:template match="md:EntityDescriptor/@cacheDuration"/>
 	<xsl:template match="md:EntityDescriptor/@validUntil"/>
 
+	<!-- Remove md:RoleDescriptor elements, which require additional schemas to be available. -->
+	<xsl:template match="md:RoleDescriptor"/>
+
 	<!-- strip xml:base entirely -->
 	<xsl:template match="@xml:base"/>