As a result, a new attribute is added to management.properties. The user can also provide a filter pattern string to the default agent via management.properties. With these new attributes, users can specify the deserialization filter pattern strings to be used while making a RMIServer.newClient() remote call and while sending deserializing parameters over RMI to server respectively.
This is an "opt in" feature and is not enabled by default.