Setting `hhvm.libxml.ext_entity_whitelist` is global and can't be changed at runtime