Add forbid_dtd flag, since we don't need any DTDs.