Web Services security mechanism can be set manually by editing the axis2.xml file or set using setupmm. The documentation only describes the manual process and should be updated to include setupmm. The manual process should probably be removed from the documentation since this prevents the web service security system variable from being updated.