Insecure AppID / FacetID behavior check