make AESKeySet serialize-safe (IV is now stored as a byte [])