STS KeyIdentifier AttachedReference shouldn't use a URI fragment

The KeyIdentifier URI in the RequestedAttachedReference returned by the STS is using a relative URI fragment ('#XYZ'), when it should be using an absolute URI instead.