Flag libxml_set_external_entity_loader as blocker

Not cool, friends.