https://stackoverflow.com/questions/30812293/com-thoughtworks-xstream-security-forbiddenclassexception