This is actually the test that leaks the global state, isn't it? `Bcypt::Engine.cost` is explicitly set to 5 in this test at line 168, and if it runs before `Password digest cost defaults to bcrypt default cost when min_cost is false`, the later will fail because `Bcrypt::Engine.cost` is no longer `Bcrypt::Engine::DEFAULT`, but rather 5.