ds:KeyInfo via a wsse:SecurityTokenReference/wsse:Reference pointing at a wsse:BinarySecurityToken that is inserted into wsse:Security. This is the WS-Security "Direct Reference" convention used by Apache CXF, as an alternative to embedding the certificate inline via x509Data.Syntax
securityTokenReference: {}
securityTokenReference: {}