@ryanc we do this. We just call them misuse cases, and we have a team of assholes we call offensive engineers to come up with them.