AI-assisted pen testing is getting better fast, but it's not yet a replacement for human creativity on complex attack chains.