@Policy annotation is not recognized in EAP 6

Issue

• Is their some way to enable webservice security with UsernameToken and a security-domain for an endpoint without to put a WSDL into the deployment?
• We added the @org.apache.cxf.annotations.Policy to the endpoint as the following,

@Policy(placement = Policy.Placement.SERVICE_PORT, uri = "policies:wspolicy.xml")
public class ExampleServiceImpl implements ExampleService{

• The annotation @Policy seems to be ignored, because webservice security is not taken into account.

• If we add a static wsdl.xml to the deployment containing the declarations from "wspolicy.xml" then webservice security works perfectly.