Instead of serialize/unserialize, we should maybe using the maybe_* versions used in core.  Even better, let's fix up the wpsc_*_meta API to handle this for us.