Protect the common thread pool against poorly written tasks that do not restore original context classloader.

Reference: RM-2329 in CloudBees
instance-identity 1.4
[FIXED JENKINS-18537]

Integrated the new version of XStream that contains the fix.
Noted 724f9e0 in 1.552