<xwss:SecurityConfiguration xmlns:xwss="http://java.sun.com/xml/ns/xwss/config">
    <xwss:RequireUsernameToken passwordDigestRequired="false" nonceRequired="false"/>
    <xwss:Encrypt>
        <xwss:X509Token certificateAlias="rsa_key" />
        <xwss:Target type="xpath">//SOAP-ENV:Body</xwss:Target>
    </xwss:Encrypt>

    <xwss:RequireEncryption>
        <xwss:Target type="xpath">//wsse:UsernameToken</xwss:Target>
    </xwss:RequireEncryption>
</xwss:SecurityConfiguration>