test(plugin-security): the managed-deny floor sees the evaluator's first grant route — allowTransfer

test(plugin-security): the managed-deny floor sees the evaluator's first grant route — allowTransfer #3469