xmlsec1: add bbappend to fix SRC_URI