I worked at a company where we did this. It was indeed fun, and we learned some things about our system that showed up some security issues. It also made everyone think more about what a curious attacker could do in a short amount of time.