Add a test case for gh-299 (guest can read _user space)