Impossible XXE in PHP

PT SWARM shows an 'almost impossible' XXE in PHP is exploitable by defeating four defenses — disabled entity loading, LIBXML_NONET, missing NOENT, a DOM nodeType check — using parameter entities.