Turns out c-PML still contracts bounded densities, then hands you minimax tests and mean rates for the privilege.

Leakage tests and key recovery turn out to be the same statistical game, at least in this framework.