initialize xmlsec

* currently there's a warning from gcc about a missing " which can be
  ignored until xmlsec fixes a pkg-config problem