allow access for private fields during deserialization