Mention why defusedxml is a requirement