From SAP NW04s SP14 onwards, you no longer transport the runtime definitions between systems, which means you have to use SOAMANAGER in each environment / client. Have a look at SAP message 1318499 for a fuller explanation and/or search SAP messages for "wsconfig soamanager transport". You still transport the underlying Service Definitions etc via the standard mechanisms in ECC, it's just the runtime definition (such as the security settings you want) that are manually defined in SOAMANAGER.
Jonathan