Dotted attributes are always allowed

[NightTsarina]

The XMLRPC library has a big warning about allowing dotted attributes:

Warning Enabling the allow_dotted_names option allows intruders to access your module’s global variables and may allow intruders to execute arbitrary code on your machine. Only use this option on a secure, closed network.

But then I see in the code for the dispatcher that you always resolve dotted attributes, potentially creating a security problem without the users knowledge. I think this is pretty grave.