waf: more checks