What Makes a Good 'Pen Tester'