Yeah I know about that..
The only possibility it talks is to use JBOSS-4.0.4 along JbossWS package. I was successful in using that. But I want to use security with JBOSS4.0.1 package. Looks like its not possible.
I have started using JBOSS4.0.4. But now I want to know how to make a client request signed. The examples in WS-Security hardly describes this in detail.