In all short, crippling an AV an run tests on it afterwards is nonsense.