The WS-Security offers the ability to mark the creation and expiration time of the message. We should add support for this element, as well as support for signing this element. There should also be a configurable policy that dictates when these are included, and how they are validated.