Creating a Security Profile for URL Filtering?

[dpflick]

I read through all the modules and unless I am missing something, there is no way to do this with a dedicated module. It appears I am left with panos_import vs panos_config_element. What would be the "right" way to create a new URL Filtering Security Profile?

For panos_config_element would I use this for the xpath:
xpath: '/config/devices/entry[@name="localhost.localdomain"]/profiles/url-filtering'

and send this as a variable?

        <entry name="geocomm_saas_url_profile">
          <credential-enforcement>
            <mode>
              <disabled/>
            </mode>
            <log-severity>medium</log-severity>
            <allow>
              <member>geocomm_saas_url_category</member>
            </allow>
            <block>
              <member>geocomm_cert_url_category</member>
              <member>web-based-email</member>
              <member>etc, etc</member>
            </block>
          </credential-enforcement>
          <mlav-engine-urlbased-enabled>
            <entry name="Javascript Exploit Detection">
              <mlav-policy-action>allow</mlav-policy-action>
            </entry>
            <entry name="Phishing Detection">
              <mlav-policy-action>allow</mlav-policy-action>
            </entry>
          </mlav-engine-urlbased-enabled>
          <allow>
            <member>geocomm_saas_url_category</member>
          </allow>
          <block>
            <member>geocomm_cert_url_category</member>
            <member>web-based-email</member>
            <member>etc,etc</member>
          </block>
        </entry>