I have a need to serialise the HashedToken via remoting, however it does not implement Serializable.

it should be given it is stored on disk via XStream marked as serializable anyway (and it has a readResolve() method )