private void updateXmlSecureProcessing() {
        final ParserConfig parserConfig = getConfigObject(ParserConfig.class);
        SAXParserSettings.setSecureProcessingEnabled(parserConfig.isSecureProcessing());
    }
This is a bit of nastiness is due to the fact that the {@link javax.xml.parsers.SAXParserFactory}
is held statically
stroom-config/stroom-config-global-impl/src/main/java/stroom/config/global/impl/ConfigMapper.java