Q&A: What Is It Like to Be a Mobile App Pen Tester?