[api] do not parse tars as XML - they might be *LARGE*