Updates to WCF Security Guidance