works around a dos vulnerability in rexml
similar diff from Jeremy Evans <openbsd at jeremyevans.net>
update run_depends so forward updates work properly
ok bernd@
Implements the ActiveRecord pattern (Fowler, PoEAA) for ORM. It ties
database tables and classes together for business objects, like Customer
or Subscription, that can find, save, and destroy themselves without
resorting to manual SQL.
from msf