tested with 'make test' in src. without the change to OpenId.pm and
RPCEnvironment.pm, the new test fails for both cases, as the returned
'cap' has no VM privileges.