SafeObjectInputStream prototype

[Bertrand Delacretaz]

Hi,

I have created a prototype at SLING-5288 to guard against recently
reported Java deserialization risks.

Feedback is welcome, and if someone feels like enhancing that with an
ObjectInputStream wrapper that would be useful.

-Bertrand