protected PrincipalCollection deserialize(byte[] serializedIdentity) {
        ClassUtils.setAdditionalClassLoader(AbstractRememberMeManager.class.getClassLoader());
        try {
            return getSerializer().deserialize(serializedIdentity);
        } finally {
            ClassUtils.removeAdditionalClassLoader();
        }
    }
Deserializes the given byte array by using the {@link #getSerializer() serializer}'s
{@link Serializer#deserialize deserialize} method.

@param serializedIdentity the previously serialized {@code PrincipalCollection} as a byte array
@return the deserialized (reconstituted) {@code PrincipalCollection}
core/src/main/java/org/apache/shiro/mgt/AbstractRememberMeManager.java