I'd like to extend that security model in a way to control access to the methods of the SOAP-Server based on either (lets say) userid, hostname or even a kerberos ticket.
I did a bit UTSL in SOAP::Lite and so far I was not able to determine a point in the code to place this extension. One idea would be to overload the "dispatch_to" method of SOAP::Lite.