How is a WSSE header validated?

See also: