Suppress bandit B406 for xml.sax.saxutils

As noted in PyCQA/bandit#452, escape and
quoteattr are not riskier than the defusedxml alternatives.

Note: Can't disable specific bandit tests:
PyCQA/bandit#211

Signed-off-by: Kevin Locke <kevin@kevinlocke.name>

src/ytdl2rss.py

@@ -10,7 +10,7 @@
 
 from datetime import datetime
 from email.utils import formatdate
-from xml.sax.saxutils import escape, quoteattr
+from xml.sax.saxutils import escape, quoteattr # nosec
 
 __version__ = '0.1.0'