Comment 2 for bug 1544721

so i think we should be going the other way... the list of service providers should be hard to get, removing the policy opens everything up, and i don't think we want that.

refer to https://blueprints.launchpad.net/keystone/+spec/service-provider-filters which is an attempt at being more selective about how we include service providers in the token.