Bewildering array of SOAP security standards