It would be good if there was a way to handle Metadata extensions could be configured from outside the EntityDescriptor.
I've needed to use SHA256 instead of the default TrustOptions value of SHA1. I can work around this be altering a TrustOptionsStore and companying Entity IDs but there's not an easy way to get a list of supported algorithms from an EntityDescriptor.