Eve Maler says, "We'd like developers to appreciate the idea that they don't have to 'roll their own'. Rolling your own is a dangerous thing in the world of Web services security. Well-meaning, experienced developers can easily go astray."
Read this java.sun.com interview of Sun Microsystems' Eve Maler, chair of the Security Work Plan Working Group of WS-I: