// FIXME: RJE - Remove cast once MessageContext supports asList(), hasHeaders()
HeaderList headers = (HeaderList) sc.getNonSecurityHeaders();
// look in non-security headers
if (headers != null && headers.size() > 0) {
Iterator<Header> listItr = headers.listIterator();
while (listItr.hasNext()) {
GenericSecuredHeader header = (GenericSecuredHeader) listItr.next();
if (header != null && header.getLocalPart().equals(targetInPolicy)) {
return true;
}