@Test
public void shouldFailForNonExistServiceAccount() throws IOException {

  doThrow(NOT_FOUND).when(serviceAccountsGet).execute();
  idTokenPayload.setEmail("foo@developer.gserviceaccount.com");
  assertThat(validator.authenticate("token"), is(nullValue()));
  verify(serviceAccountsGet).execute();
  verifyZeroInteractions(projectsGetAncestry);
}