@Test
public void testAuthenticate_scopeNotAllowed() throws ServiceUnavailableException {

  when(config.getScopeExpression()).thenReturn(AuthScopeExpressions.interpret("scope3"));
  assertNull(authenticator.authenticate(request));
  assertNotNull(attr.get(Attribute.TOKEN_INFO));
}