capture the soap header after appling the security policies in soa suite with owsm

It's sometimes - especially in uat, not in live - necessary to capture the soap header for debugging after appling the securty policy in soa suite 11g. if you apply regular logging policy after the security policy, you won't see any security tokens. but you must enforce it inside the policy definition. is it quite simple to do. you can follow the screen shots respectively.

it must be for only checking some tokens, meaning debugging. before prod, you must rollback the changes.