IDP should be configurable to sign assertions

I am trying to integrate with an SP that expects both the assertion and the entire response to have their own signatures. Currently picketlink can only sign the entire response. I would like to be able to configure the signing of the assertion and the response independently, preferably on a per-SP basis.