Add rules for serialization/deserialization (security)

[JeremyLikness]

Is your feature request related to a problem? Please describe.
Extend #10 to allow fluent configuration to opt-in and out of members to constrain serializer options and prevent calls. Use a default opt-in for Queryable, Enumerable, and string operations.

Describe the solution you'd like
Something like:

options => options
    .AllowDefaults()
    .AllowTypes(typeof(Product), typeof(ProductDetail))
    .AllowType<Category>()
    .Prohibit(typeof(Enumerable), nameof(Skip));

Describe alternatives you've considered
N/A

Additional context
This will be a client/server engine and it should not be possible to create expressions that call unauthorized methods like File.IO.

[JeremyLikness]

Fixed with #12