1. xml version="2.0" declaration makes documents invalid, allowed versions are "1.0", "1.1" 2. < credentials > map values- which are signed xml files don't have <?xml ?> header, they're still valid but not well-formed