add another test of cljr-cycle-privacy, and fix off-by-one error