We should be able to protect both web form and database with forms.

In widget builder should be option to set password, only the person who know this password can submit web form or see database records in database widget.