Elements replacing the wildcard MUST be namespace qualified, but can be in the targetNamespace The use of "any" is to allow extensibility and different forms of security data.