tests for tool privacy - failing, see #130