(I bet you're sick of these by now, huh?
There should be a field in the developer.cisco.com / Basic Application Info page (the place where I put in screenshots and descriptions) for "Information for Testers."
This would be free form text that your validation team gets, but which NEVER appears on the public face of the App in AppHQ.
Our app requires an access code, and there is clearly no good process inside Cisco for getting this kind of info to the people actually doing the testing (I've had to send it over and over, and the testers not having it has caused repeated delays).