To be consistent with the other security configs, this should be done this way:

```xml
<firewall name="wsse_secured" pattern="/api/.*">
    <wsse />
</firewall>
```