make these serializable to make audit happy
more audit violations. Some of these rules are broken - for example apparently declaring a thrown exception in an abstract class is a yellow flag