Can contain XPath with ' or " Here the notation of each implementation of the security qos comes. Each implementor should provide the schema which defines this qos