more widget security

Signed-off-by: Fred Shequine <fshequin@gmail.com>