various stuff playing around with ws-security policy.