Use execute, not grab, that's deprecated
Evaluate root/workspace when not in a Frontend context
Sanitize the XPATH to allow for more complex queries
Don't replace the datasource node when the data is invalid. Fixes #13
Really fix #13