You're hiding the SecureString dependency on allocators.h by indirect include via serialize.h?