[Security] Fix parent serialization of user object