WS-Security in the Enterprise, Part 2: The Framework