Testing security plugin without breaking real thing