Basic security review

We added some sane default for the api and narrowed the interfaces a user can bind data to. We separated the internal struct from the struct a user can bind data to. We added some validation rules to enforce or disallow values for certain fields

Closes #100 (closed) closes #101 (closed)