we should also endorse OSGi aware stax-api spec jar from servicemix, to override the one from the jdk