Is there a way to prevent jbossws/services from listing services currently deployed? I thought of securing it the way jmx-console is secured, i.e. password protected, but would that mean that web service consumers would have to authenticate too? Or is it just going to password-protect the web interface? Thanks!