Use a less trusing XML parser.

"address XML-related security issues which were reported to
security@python.org over the last several months"

http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html
http://bugs.python.org/issue17239