blocking some exploits in lvl16 -- close #127, #125