As @AlexeiFedorov has pointed out here, test_pauth_leakage() tests the leakage of PAuth keys, but actually the keys are not set by the test itself (except in case of ENABLE_PAUTH passed, which sets only APIAKey). All the keys are reset to unknown value (0 in the ARMAEMv8-A model). We need to fix this.