Should Failing Phish Tests Be a Fireable Offense?