add mustUnderstand option for Wsse security (part 2)