You can use Kerberos tokens for encryption, decryption, signing, and verifying.
Kerberos token encryption for providing message Confidentiality and Integrity on outgoing SOAP messages from the broker is supported in the following configurations:
Configured with a policy set and binding defining the message Integrity
Configured with a Kerberos policy set and binding.