I have a single instance of Xstream configured on the server for xml serialization/deserialization. I have an external property that specifies the permissions on the xstream obj
