My bad, and I know it's not easy to defer cheating. I think I managed to solve the worst of that via regex validation, but of course there's still ways - like __import__ with getattr and split string literals. Those are not easy to solve, and my miserable regex skills are probably not enough.

Thanks for the feedback, though!