In 4.0.x/HEAD we have:
While in 3.2.x we have:
The 3.2.x approach seems more correct, since xalan.jar contains org.apache.* stuff, not any of the following "endosed" packages:
It should be moved out from the bootstrap libs to the default/all lib dirs.