Would be be interested in a patch that took the DTD as a command-line parameter? Yes, I know I can add it, but WS-Security is about SOAP messages and SOAP doesn't allow DTD, so any DTD or Schema info has to be external. This might not be of general interest -- import DTD from ... -- so I won't be offended if you say no. :)