So wait, he did "an immense amount of pen testing", while at the same time this was something he snuck in at the last minute on a whim? Something doesn't add up here.