whats the use case for yum serial/deserialzation ? taking into account the recent CVE's I'm not in favor of adding more YAML depdencdies ?