Long time ago, I read a blog about how the user must absolutely trust the dialog boxes for Ctrl+Alt+Delete and Adminstrator passwords and why they were tricky to get right..
Then I hear that now ctrl alt delete is a webview. Its difficult to believe. Do you have a reference?