Harden the deserialize function without killing false positives.

And nothing else.