kryoThreadLocal = ThreadLocal.withInitial(() -> {
            final Kryo kryo = new Kryo();
            // Enable registration requirement for security - only registered classes can be deserialized
            kryo.setRegistrationRequired(true);
            if (logger.isDebugEnabled()) {
                kryo.setWarnUnregisteredClasses(true);
            }
            // Register allowed classes for serialization/deserialization