re-instating workaround for PHP, XML custom entity shortcomings

as discussed...LIBXML_NOENT is perhaps not an adequate measure on its own to protect against local entity injection/expansion.