In this mode (or maybe by default?) tests should fail if the extension is making unexpected hostcalls.