Limit the TCCL when instantiating UntrustedXML