Allow a precomposed Security Object to be passed

Also, note a dependency to a Fork of node-soap (shelbys) which, as far
as I know has not been submitted to node-soap.
We may wish to do this…