testing restricted orig nrrd access