[xmlsec] Detached EncryptedKey template...

[Aleksey Sanin]

Yes, you should be able to do it (assuming that "deattached" means 
"referenced
with <dsig:RetrievalMethod/>").  The reading should be done automaticaly
(assuming that <EncryptedKey/> and <dsig:RetrievalMethod/> are enabled
as allowed key sources). And this thread might give you some hints on how
to create <EncryptedKey/> element:
    http://www.aleksey.com/pipermail/xmlsec/2003/000890.html

Aleksey