XML bomb protection for Python stdlib modules, an xml serialiser
