<WS-SecurityPolicy> language that is used to expresses domain specific policy and/or an instance of a web service requirement and policy attachment to relevant WSDL constructs