Why Your Automated Pentesting Tool Just Hit a Wall