Java 如何使用JAX-WS Metro在端点（服务器）上实现WS-SecurityPolicy？

我的WSDL文件中有以下策略：

<wsp:Policy wsu:Id="UsernameToken" 
   xmlns:wsp="http://www.w3.org/ns/ws-policy" 
   xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702" 
   xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
   >
   <wsap:UsingAddressing xmlns:wsap="http://www.w3.org/2006/05/addressing/wsdl"/>
   <sp:SymmetricBinding>
       <wsp:Policy>
           <sp:ProtectionToken>
               <wsp:Policy>
                   <sp:SecureConversationToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient" />
               </wsp:Policy>
           </sp:ProtectionToken>
       </wsp:Policy>
   </sp:SymmetricBinding>
</wsp:Policy>

    <wsp:PolicyReference xmlns:wsp="http://www.w3.org/ns/ws-policy" URI="#UsernameToken"/>

        List<?> securityList = soapEnvelope.getSecurity(null, true);

        if ((securityList == null) || (securityList.size() == 0))
        {
            securityList = soapEnvelope.getSecurity();
        }

MustUnderstand headers:[{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] are not understood