until the wss4j update is ready, use some cxf magic to determine what
saml token version is required.