2.3.3 Bare WS-Security Header or Simplified ID-WSF

1. SHOULD NOT use, as many important security features such as message correlation, replay detection, and identification of endpoints are not supported by this mechanism.

2. Document resultant limitations if not implementing full ID-WSF.