I think that we'll need to come up with a better method of testing this. While this makes sure that the right things are called, it doesn't make sure that they're called correctly. We may be able to arrange to have a bot running as root, but I'm still hesitant to land this without some actual concrete testing.