• Vendors won't, at least not until RFCs start to require some proof of testing. That won't happen until insurance companies put it in policies with companies.