The service definition team needs to take a cut at determining what elements in a message payload should be secured and align with the business requirements community to validate these assumptions.

gerald.gray1 (11/13/2009 10:44 AM): This is out of scope for the service definition team as this time and would potentially require multiple technology specific artifacts to be generated to avoid the appearance of favoring one technology over another. This issue is closed pending further guidance.