What serialization is bad - http://cr.openjdk.java.net/~briangoetz/amber/serialization.html