Potential Security flaw when cloning forms