Always sign assertions if the IdP relying party config says to