PSA: if you're on the receiving end of a red team test, the authorization letter protects you too