Using the ImmutableMap was my first cut at this code.  But for some reason, ws-security was failing during integration when I did that.  I'm not sure if it is because cxf needs to modify the map or if it is because I had to make the Properties instance (cryptoProperties) inside the config map into an ImmutableMap as well, but it wasn't working so I decided to just use deep copy.