Security?

There are a lot of emergin models for applying security to web services,
e.g. using SOAP header to transport Kerberos tickets or licence data.
Is W3C working on a common specification for security and licensing in WS?

Thank you!
--
Michele Costabile