In order to make `AuthorizationDeniedException` serializable, we need to make the authorization decision it holds serializable.