fix: WS-Security binding may be empty