Add regression test for CVE-2018-11767

There's no test for security vulnerability CVE-2018-11767, and the similar issue (KMS loading groups mapping) broke twice as a result (HADOOP-13638 is another one). A regression test will help us not to break it the third time.