Major Description
test coverage within the different parts of oak-core varies quite a bit such that the default BUNDLE rule is not only of limited value. I would therefore suggest to add additional PACKAGE based rules for the security modules, starting with 3 levels of branch coverage to reflect the current state and reducing them as we add additional test.