badtouch test

[kpcyrd]

It might make sense to have a test subcommand that can be used to make sure the script works. This would call eg test_positive and test_negative that both wrap around the verify function, once with correct credentials and once with incorrect credentials.

Including passwords in the script seems counter intuitive, but those should be dummy accounts and the scripts that have those tests wouldn't be meant to be shared publicly. There might be a better way to do this though.

[kpcyrd]

badtouch oneshot could be used in a bash script to ensure the lua script works correctly.