so this does not stop you from implementing Schneier's suggestion to keep SOAP off of HTTP.