Web Services Security (WSS) Ratified as OASIS Standard