I would like to know whether there is any specific reason why handleReferenceList method in WSSecurityEngine has private access and therefore is not accessible to subclasses. In contrast handleEncryptedKey, handleUsernameToken have public access. -- Thanks and Regards, Abhijit