The SAR Deployer should be throwing an error if it finds more than one loader-repository config.
Currently it just ignores the duplicates and uses the first one.

The same problem exists in head in
ServiceDeploymentParser::parseLoaderRepositoryConfig()
which was copied from the SAR deployer.