Testing for Inclusion of Functionality from Untrusted Control Sphere