That's why for pen testing, you still warn people, but you do it high enough the chain that the individual behaviors and responses are not affected.