lib/serialization: deserialize_class should not be public