WL-3453 Don't allow sysadmin to bypass security checks.

Doing good tests requires too much refactoring so not including that work.
Just means splitting up the method into multiple checks and doing the setup several times. SakaiKernelTestBase doesn't reset things between runs so you have to start being careful about using different resources or put it in different files which is very slow.