Outbound StaX code should fail on not finding a signature/encryption part

The outbound StaX code should fail on not finding a signature/encryption part. Perhaps we could just add a boolean to SecurePart indicating whether it was satisfied or not, and then loop through the SecurePart lists when we're done to check everything was matching.

With the current code a user might specify the wrong namespace and then assume security was applied.