this is a packaged app, but not a privileged one, so we're not testing the right thing