[jboss-user] [JBoss Web Services] - What is the best practice for WS security