more extensive note on unserialize() change