The good news... I got ahold of the BDU. The bad news... the xml file is not, in fact, xml (wait for it) the fools encrypt it. If they're smart, it's encrypted with the MIC (manufacturer cert in the firmware) -- I don't care enough to trap it's calls to openssl to find out.
(see pm for xml and tool output)
[Edit: the crypto key ".s$5af37kasl;we34jfiseeu0q248vm" -- no attempt was made to hide it]