New tool spots to identify security and privacy issues with COVID-19 tracing apps