add mustUnderstand option for Wsse security (part 1)