I placed a jboss-wsse-server.xml descriptor in the WEB-INF folder in my webservice's war, but it's not getting picked up.  Even if I give it an ill-formed XML, it does not complain, neither at deploy nor at service invocation time.

Where is the source where it looks for the wsse descriptor?  I am thinking to debug through that code to understand how it finds the descriptor, and understand why mine is ignored.