FAIL: some sensitive user data the test should not be able to see.