Test fixtures for the security platform: principal factories and a configurable fake PolicyDecisionPort