mdmwebkit: Tighten webkit types and args and forbid navigation