f/input method security

Following advice from #7.

I'm not sure if I understood @guido.gunther right, but I think it's going to be easier to merge security features as they come instead of doing a huge overhaul. Thus this patch only secures virtual-keyboard.