ws-security without ws-addressing?

Hi,

Am I correct in thinking that I cannot implement ws-security with wsf php on a request if the request does not use ws addressing?

 ie I want to handle an incoming request like this:

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">

        <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soap:mustUnderstand="1">

                <wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Timestamp-12468716">

                        <wsu:Created>2008-06-23T13:17:13.841Z</wsu:Created>

                        <wsu:Expires>2008-06-23T13:22:13.841Z</wsu:Expires>

                </wsu:Timestamp>

                <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UsernameToken-31571602">

                        <wsse:Username>username</wsse:Username>

                        <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">password</wsse:Password>

                </wsse:UsernameToken>

        </wsse:Security>

        <soap:Body>

                <GetStatus xmlns=http://HOST/webservice.php>

                        <JobNumber>string</JobNumber>

                </GetStatus>

        </soap:Body>

</soap:Envelope>

Is this going to be possible or do I need to another solution?

thanks,

Dave