disable libxml entity loader to prevent attacks via xml external entities (fixes #833)