Specify the real values we want for attributes, without extra escaping.

The XML API will escape whatever needs escaping.

This fixes XFRM-188.