related #5661 maybe `io.pickle.compat = 'global/local`` where we only allow local changes to the UnPickler. This is not destructive, just 'bad practive', but weighing against more usability