Add support for WS-SecurityPolicy "Strict" validation

This task is to support "Strict" WS-SecurityPolicy Layout validation. Checks will be added for three of the "Strict" requirements relating to Signatures:

• Any security header token must appear before the Signature that signs them
• Any token used to generate a Signature must appear before the Signature
• An endorsing Signature must appear after the signed Signature