add test for a single direct child, for both recursive and non-recursive
to verify that the algorithm is secure at a single level with respect to
recursion