Describir: Security for Web Services and Service-Oriented Architectures