Penetration test of a PSD2 interface implementation