<xwss:SecurityConfiguration dumpMessages="true" xmlns:xwss="http://java.sun.com/xml/ns/xwss/config">
    <xwss:UsernameToken name="cafe" password="babe" useNonce="false" digestPassword="false"/>
<xwss:Encrypt>
        <xwss:X509Token certificateAlias="rsa_key" />
        <xwss:Target type="xpath">//wsse:UsernameToken</xwss:Target>
    </xwss:Encrypt>
<xwss:RequireEncryption>
        <xwss:X509Token certificateAlias="rsa_key" />
        <xwss:Target type="xpath">//SOAP-ENV:Body</xwss:Target>
    </xwss:RequireEncryption>
</xwss:SecurityConfiguration>