A whitelist that contains (mostly for security purposes) which classes can be serialized and deserialized.