When required, generic security logic can be embedded within a service. The close proximity to the service logic maximizes the chances that the security logic will be consistently executed without interference from attackers.

When required, generic security logic can be abstracted into a separate utility service. This allows for reuse.

When required, generic security logic can be abstracted into a service agent. This allows for reuse and the security logic can be executed in response to runtime events.

All of the above.

The service's autonomy is increased.

The operational responsibility is increased due to the need to keep the dedicated identity store in synch with a parent identity store.

The potential to apply the Service Abstraction principle is increased.

The service will no longer be dependent on a certificate authority.

discarded within seconds after creation

stored in a UDDI repository for auditing purposes

combined together at runtime

None of the above.