make more de/serializers optional for security reasons