Encryption is functional as well as most permissions checking.
'Proper' testing is still required.