mock security manager

[drernie]

And possibly mock the whole client, to streamline unit testing.

Though it would be nice to have an integration test that ran against a live client.