For tests, assume 3 required security questions. TODO: Test without security questions.