[BxMS 6.4] Jackson Databind deserialization (brms 1.3-8, bpms 1.3-6)

With BxMS images (brms 1.3-8, bpms 1.3-6) that updates OpenJDK and EAP 6.4.20

During TransportTest there appears the following error in the server logs

JsonMappingException: Illegal type (org.kie.server.api.commands.CommandScript) to deserialize: prevented for security reasons

see http://pastebin.test.redhat.com/594758 (or the attached file) for the full log

This worked in brms version 1.3-7 (with amq 1.3-5). Now it fails in brms 1.3-8.

see also https://access.redhat.com/solutions/3442891