Users are currently unable to configure an allow-list via the Store properties.

If the JavaSerialziationMarshaller is required, then it's possible for the user to configure this via the infinispan.deserialization.allowlist.* system properties as a workaround.

The GenericJbossMarsaller loaded by the StoreMigrator does not use a CheckedClassResolver, so it should be possible for all entries to be read.