testing security for mode conditions and variable initializers