How you can use MessageInspectors in WCF in conjunction with custom behaviors, so that you can support the WS-I Basic Profile UsernameToken with a hashed Password Digest - currently unsupported in WCF.