r3148: make --failures work for the BASE-DENY1 and BASE-DENY2 tests