Section 5.1.6 of the profile specifies that the SOAP Body MUST be encrypted when it contains payload data. It however does not specify whether the payload MAY be still be encrypted if it does not contain payload data.