restrict access to hidden test runs