CSP tests: don't test unreachable non-report-only states