Just trying to stir the pot. It was just a hint :) :) Also FYI, Werner and I (primarily Werner) are working on WSS4J (http://wss4j.sf.net). We'll soon move it to Apache Web Services project.
Must have a look-see!
Where did you end up with the licensing issue for this?
Cheers,
Berin