Store vetos in the XML itself

Stop munging these into the decription, as this is fragile and breaks the
cache-id loading of the failed metadata.