How to evaluate control measures for LLM agents?