diff --git a/src/main/as/com/threerings/presents/data/ClientObject.as b/src/main/as/com/threerings/presents/data/ClientObject.as
index f2fd2bbb2..18843f203 100644
--- a/src/main/as/com/threerings/presents/data/ClientObject.as
+++ b/src/main/as/com/threerings/presents/data/ClientObject.as
@@ -122,6 +122,8 @@ public class ClientObject extends DObject
         super.readObject(ins);
         username = Name(ins.readObject());
         receivers = DSet(ins.readObject());
+        // TEMP: read and throw away ClientObject._ignore from the Java side
+        ins.readObject();
     }
 
     protected function createPermissionPolicy () :PermissionPolicy
diff --git a/src/main/as/com/threerings/presents/data/PermissionPolicy.as b/src/main/as/com/threerings/presents/data/PermissionPolicy.as
index 6e2ccc57a..215407be6 100644
--- a/src/main/as/com/threerings/presents/data/PermissionPolicy.as
+++ b/src/main/as/com/threerings/presents/data/PermissionPolicy.as
@@ -31,7 +31,7 @@ import com.threerings.io.Streamable;
  * at client resolution time via the ClientResolver. This would be an inner class of ClientObject,
  * but ActionScript does not support inner classes.
  */
-public class PermissionPolicy
+public class PermissionPolicy implements Streamable
 {
     /**
      * Returns null if the specified client has the specified permission, an error code explaining
@@ -43,5 +43,15 @@ public class PermissionPolicy
         // by default, you can't do it!
         return InvocationCodes.ACCESS_DENIED;
     }
+
+    public function writeObject (out :ObjectOutputStream) :void
+    {
+        // nothing to write
+    }
+
+    public function readObject (ins :ObjectInputStream) :void
+    {
+        // nothing to read
+    }
 }
 }