Specify a list of protected HTTP methods for secure web services

For secure web services we would like to specify a list of HTTP methods that should be secured. For example, we would like to secure POST requests but leave GET requests unsecured (for WSDL access). See GERONIMO-4015 for a bit more info.