Determined that users were bots

and blocked them.

Since those test users were people I know, I know they weren’t bots or using VPNs or coming from suspect domains.

Also, it tried to install some fourth-party cipher thing on my site that I didn’t know was going to be there. Maybe it’s harmless, maybe it’s awesome, but not knowing it was going to do that was needlessly confusing and irritating.

Ultimately, it took longer to come here, write about the problem and explain why I gave this such a low rating, than it did for me to deactivate this plugin and install something that works much better. Hopefully, the issue is fixed for whomever tries it next.