EUVD-2026-38590

jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields...