with changes to wss4j 1.6.18 the saml version is injected into the
callback, so no message magic is required.