A very useful set of guidance on how to survive with all of the options related to security in WCF apps.
The same kind of guidance with some additional explanations is also available as a pdf book.
http://www.codeplex.com/WCFSecurity