The thing I don&#x27;t understand here... How you can you write a multitenant app where protecting an EAV store is a critical feature and not have tests that validate that your security still works that run before every deploy.