Currently, to set the secure validation mode, one must set a property on the DOMValidateContext as follows:

  valContext.setProperty("org.jcp.xml.dsig.secureValidation", true);

There should be an easier way to do this via a standard API, example a setSecureValidation() method.