Major Description
To make it virtually impossible to tamper with any serialized data on disk, Wicket should encrypt the data with a key bound to the user session. This also prevents accidental leakage of sensitive data (such as passwords) via serialized form contents.