Move test framework from wrt-commons to security-tests