Overlord complete.

I see that as you move through the rest of the test, you're always checking authenticate. If you want the method to be public, that's fine, but there's currently no reason to peg to that part of the implementation. There's also some conflated state, which I'm guessing is why you don't have the bomb in a `let` already. Your cases shouldn't depend on each other in any way, so don't rely on side effects (like the bomb being booted in one test, and then checking that booted state in the next).