    it "includes plaintext secret" do
      expect(app.as_json).to include("secret" => "123123123")
    end
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.