In order to make AuthorizationDeniedException serializable, we need to make the authorization decision it holds serializable.