Should you let OpenClaw pen test your system? Plus: Cybersecurity for ephemeral software