3.1.5.2.1 Issuance Binding
The client MAY<5> reject a received message that specifies the action:
http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTRC/IssueFinal
The client MAY<6> reject a received message that specifies either of the following <KeyType> element values:
http://docs.oasis-open.org/wssx/wstrust/200512/Bearer
http://docs.oasis-open.org/ws-sx/ws-trust/200512/Bearer
Otherwise, the client MUST process a received message that conforms to the syntax specified in section 2.2.2.1.1.
Exactly one message MUST be processed as part of the issuance binding. Additional messages MUST be rejected.