Basic security review of extension

[bedeho]

• consider all peer input
• check that what exceptions can be thrown by our own code in different on_* calls, and everything else really