实现独立客户端使用安全性的Web服务的最简单方法（和ws-stack）是什么？

I need to consume a webservice with ws-security using a stand alone java client, I can't use the metro stack as I need to change the wsdl to include policies, any idea on which stack to use ? I prefer to avoid scrap (stacks which I will need to spend a quarter trying to configure it)... for example, I downloaded jboss 6 to use its wsrunclient.bat, but it didn't work and I had Spring exception (WHAT IS THE RELATION BETWEEN JBOSS AND SPRING!!!!) they didn't bother testing that..I need to consume a webservice with ws-security