cxml security