fix exclusion of security tests (at least under windows they were still run)