[wss] security token reference

[Frederick.Hirsch@nokia.com]

I'm not sure why the core draft says that  use of a SecurityTokenReference
outside a Security header is unspecified. ({599-600] clean draft [1]

I propose that sentence be removed.

Isn't there value that if I have some other SOAP header that needs to reference a security
token, that I can use a SecurityTokenReference to do it, assuming I use the wsse: namespace? 
Is there a reason not to?

regards, Frederick
 
Frederick Hirsch
Nokia Mobile Phones

[1] http://www.oasis-open.org/committees/wss/documents/WSS-Core-09-0126-merged.pdf