The Folder-auth plugin uses ConcurrentHashMap's KeySetView as internal data structures and has whitelisted it for serialization through XStream. Remove the white-list entry for `ConcurrentHashMap$KeySetView` and serialize a simpler data structure to the config.