This spec succeeds with client security ON and Riak security OFF. It should definitely fail this line.