The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.