This is the mscrypto equivalent of what was done in commit
e6aaf64c (xmlsecurity: validate OOXML
<Manifest> references, 2016-02-01) for NSS.

Change-Id: I7ee713fb5c7b55ded38100a0f25f718f2f323e08