add cxf-rs-security-xml feature to the SAM service