This handles everything except for testing salt-encryption of vendor specific
attributes, which is coming shortly.