Disable dtd capabilities that could be used inappropriately

Thanks to Graeme Glen, University of Auckland for the report on this.