this should probably use some of the builtin `urllib` type of functionality so that we don't have to worry about things like `&` in the xmlns. definitely need to at least quote/escape all values, though there should be libraries that do this already