<xwss:JAXRPCSecurity xmlns:xwss="http://java.sun.com/xml/ns/xwss/config">
  <xwss:Service>
    <xwss:SecurityConfiguration dumpMessages="false">
      <xwss:Sign/>
      <xwss:Encrypt>
        <xwss:X509Token certificateAlias="xws-security-client" keyReferenceType="Identifier"/>
      </xwss:Encrypt>
      <!--
         Note the order of the requirements below. The message sender
         should have first signed the body and then encrypted its
         contents.
      -->
      <xwss:RequireEncryption/>
      <xwss:RequireSignature/>    
    </xwss:SecurityConfiguration>
  </xwss:Service>

  <xwss:SecurityEnvironmentHandler>
        com.sun.galactica.utils.SecurityEnvironmentHandler
  </xwss:SecurityEnvironmentHandler>

</xwss:JAXRPCSecurity>