Ability to whitelist properties for deserialization

[stevebread]

It is possible to whitelist properties for serialization using a FIlterProvider. Whitelisting is more secure than blacklisting and a similar approach should be available for deserialization.

[cowtowncoder]

Makes sense. The main challenge with all changes to deserialization is that number of code paths is much higher for BeanDeserializer than BeanSerializer. But hopefully this can be implemented at some point.

[cowtowncoder]

I think this might be covered by #1296, if and when that gets implemented. Mechanism would be different. However, since filters are not used for deserialization, I think I'll close this in favor of the annotation based variant, since adding support for filters for deserialization is not likely to be implemented in near term.