WS-Security proxy pattern