I am afraid these staticmethod names could easily be confused with property accessor methods, but there is no property defined.  That said, I think this approach is missing an important use-case:  I already have a vmxml instance, and I want to add/modify/change the seclabel stuff in-place, from a single name.

With this model, we have to make a secondary vmxml instance, modify it, then write it back.  All the while the vmxml instance I already have is not as useful.  I think both access models can be made to work, if you start by setting up the propert-accessor way first.  Then it's easy to put a staticmethod around that.  This way, both uses are supported.  Do you think that makes sense?