[ryan-morosa]

JIRA Ticket:
N/A

What Does This PR Do?

This PR adds a waffle switch for controlling whether or not asymmetric auth can be allowed or disallowed. It's based upon the conversation from slack here.

What Should Reviewers Watch For?

• Does the name for the waffle switch look good?
• Does the error message look good?

If you're reviewing this PR, please check for these things in particular:

Validation

• Added an integration test that tests it both with the waffle switch active and the waffle switch not active - I think this is good enough validation but let me know otherwise.

What Security Implications Does This PR Have?

Please indicate if this PR does any of the following:

• Adds any new software dependencies
• Modifies any security controls
• Adds new transmission or storage of data
• Any other changes that could possibly affect security?

• Yes, one or more of the above security implications apply. This PR must not be merged without the ISSO or team
  security engineer's approval.

Any Migrations?

• Yes, there are migrations
  • The migrations should be run PRIOR to the code being deployed
  • The migrations should be run AFTER the code is deployed
  • There is a more complicated migration plan (downtime,
    etc)
• No migrations

[jimmyfagan]

Looks good! Let's touch base tomorrow about getting these recent waffle switches sorted out prior to the next deployment!