How to implement AdbaType.JAVA_OBJECT

Lets talk about how to implement AdbaType.JAVA_OBJECT. 

I raised the issue on the jdbc-spec discuss list, and my gut feeling is that this isn't possible to do without causing a deserialization security hole, but maybe i'm wrong.

@davecramer had some feedback, maybe we can discuss this more in detail here instead of on the list.