support multiple strategies in xml_security tests