Add tests for CSAR security validation.