And disable copy&paste in really clever ways so you can't just edit an attribute on a textfield to paste your text. Browsers helpfully expose a on paste event that can be hijacked from various places and text manipulated during paste. I'm an embedded dev and I can't get my head around it so I'm happy for a webdev to correct me if I'm wrong.