Running `make test` runs _all_ tests four times - once per transport (PB / HTTP) and also with security disabled then enabled. The security tests should be a small subset for each transport instead of the entire suite.