What is this test doing? The key thing to test with SandboxedFlask is that templates don't have access to object attributes that begin with `_`. This means you have to call `render_template` with a test object and the template should be unable to access `_restricted` in the object, while being able to access `unrestricted` (add your own names here).